kruser
Premium
join:2002-06-01
Saint Louis, MO
clubs:
 ·AT&T Southwest
| Exchange server flooded with request from APNIC region
I'm running an Exchange 2003 server.
It is flooded with port 25 requests from the APNIC or Asian region.
I have zero users that would travel there so I thought I'd try and block the requests at the firewall.
Our normal business would never require getting email from that region.
It appears that APNIC has a wide range of IP assignments.
Does anyone have a handy list of all apnic ip ranges or a better solution to keep them from hitting the exchange server? |
|
vic102482
Premium
join:2002-04-30
Upper Marlboro, MD
| Exchange 2k3 SP2 supports blacklists.
»www.petri.co.il/block_spam_with_···2003.htm
Take a look 
--
I tie a rope around my penis and jump from a tree, don't you wanna grow up to be just like me!!!! |
|
yaplej
CCNA
Premium
join:2001-02-10
White City, OR | reply to kruser
We have seen a huge increase in traffic from APNIC. Not only spam, but also port scans. |
|
kadar
Premium,ExMod 2001-02
join:0000-00-00 | reply to kruser
I've used this in the past. Not sure how up to date it is.
»blacklist.linuxadmin.org/
--
The Revolutionary War was fought over a 14% tax, what % are you paying now? |
|
Amadeus
Premium
join:2005-05-02
Miami, FL | reply to yaplej
Yeah us to what's with that? |
|
BosstonesOwn
join:2002-12-15
Everett, MA
clubs:
 ·Comcast
| reply to kruser
Some are saying its the RBN under a smoke and mirror show , scouring the net for open spam relays. Apparently the cost of the haul from that location is a killer , so they are looking for more us based spam relays.
At work I just went ahead and blocked the port scanning blocks, since we have travelers that are world wide , I can't take the risk of blocking anything but known offenders.
--
"It's always funny until someone gets hurt......and then it's absolutely friggin' hysterical!" |
|
