RE: [isp-linux] Re: Blocking all APNIC IP Addresses

["Steve West" <wppiphoto@xxxxxxxx>]

Raju,

I think I have the right to block out any traffic I wish on servers which we
OWN & OPERATE. Last time I checked, our company is fortunate enough to be
doing business in a free, democratic country.

It's too bad you have seemed to take it personally. But, I don't think I'm
alone in the problems coming from Asia.

And lastly, it's not very kind to be compared to "Nazis"!

SW

-----Original Message-----
From: Raju Mathur [mailto:raju@xxxxxxxxxxxxxxx]
Sent: Monday, April 09, 2001 12:44 AM
To: isp-linux@xxxxxxxxxxxxx
Cc: linux-delhi@xxxxxxxxxxxxxxxxxxxxx;
linux-india-general@xxxxxxxxxxxxxxxxxxxxx; india-gii@xxxxxxxx
Subject: [isp-linux] Re: Blocking all APNIC IP Addresses


/me quickly updates /etc/mail/access on all systems he administers:

wppi.com    550 We do not accept mail from Nazis.  Please see April 2001
archives at http://ISP-Lists.ISP-Planet.com/isp-linux/archives/ for more
information.

Copied to regional Linux and IT discussion lists to enable others to
do the same.  Don't worry, no one in Asia will ever want to do
business with you once this gets around (and I can assure you I'll do
everything in my power to ensure it does).

BTW, APNIC has the following netblocks assigned to it:

202/8, 203/8, 210/8, 211/8, 61/8 and 2001:0200::/23

With best regards,

-- Raju

>>>>> "Steve" == Steve West <wppiphoto@xxxxxxxx> writes:

    Steve> Thanks to all who replied to my question. I never thought
    Steve> my question was going to be such a discussion topic! :)

    Steve> This whole thing started several months ago, when we were
    Steve> getting scanned on the average about 3 times per hour by
    Steve> various servers from Asia!!! We have been pretty successful
    Steve> in blocking about 90% of all the scanning. On the other
    Steve> hand, the spam mail issue is still a very large problem. No
    Steve> matter what we did to block various mail servers, they just
    Steve> find a new mail server to use. As you can see, this is a
    Steve> loosing battle trying to keep up!

    Steve> I understand that we should not generalize an entire
    Steve> region, but in our case we have had more trouble
    Steve> originating/using servers from Asia than any other region!
    Steve> I'm very aware that many of these attacks are being done by
    Steve> users in the US using vulnerable systems in Asia. But
    Steve> without any real security measures in Asia, they will
    Steve> forever be the perfect target by hackers.

    Steve> This is very alarming because it speaks of the LACK of any
    Steve> laws. Basically, we came to the conclusion that at this
    Steve> point, we do not do business with anyone in the Asia region
    Steve> and could afford to ignore this entire region.  Maybe our
    Steve> policy will change when it requires but I think their laws
    Steve> must change first.

    Steve> Going back to my question, what IP addresses are assigned
    Steve> to Asia? So, far I have

    Steve> 202.0.  203.0.  210.0.  211.0.

    Steve> Thanks!

    Steve> SW
--
Raju Mathur          raju@xxxxxxxxxxxxx           http://kandalaya.org/

^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Penguinistas!  Find out the latest news, tips and opinions
making its way through the Linux industry.
http://www.linuxplanet.com/linuxplanet/

_____________  The ISP-LINUX Discussion List  _____________
To Join: mailto:join-isp-linux@xxxxxxxxxxxxx
To Remove: mailto:remove-isp-linux@xxxxxxxxxxxxx
Archives: http://isp-lists.isp-planet.com/isp-linux/archives/