5 ms·
My servers ban huge swaths of IPs from certain places that originates enormous amounts of spam, scanners, and other nefarious traffic. It's very effective
by VWWHFSfQ 2y ago
My servers ban huge swaths of IPs from certain places that originates enormous amounts of spam, scanners, and other nefarious traffic. It's very effective
- FredPret 2y agoSturgeon’s law [0] apply to all sorts of things, including web visitors [0] https://en.m.wikipedia.org/wiki/Sturgeon%27s_law https://en.m.wikipedia.org/wiki/Sturgeon%27s_law
- Fokamul 2y agoSo you ban US and China, aka two places where most spam, ddos and malware is coming from. Right?
- VWWHFSfQ 2y agoChina yes
- ajsnigrutin 2y agoSo, all the cloud, vps, and hosting providers?
- LinuxBender 2y agoI block most of them but something I noticed was that the more affordable a provider is the more garbage that comes from them.
- kiwijamo 2y agoIf I followed your strategy I would be blocking all of Google. Back in the days I operated my own mail server >50% of all spam was from Google USA... YMMV.
- LinuxBender 2y agoI do that on several of my hobby nodes. I block entire ASN's for all the major platforms. Real people can still reach them just fine. To your point I do less of that on my self hosted mail servers and instead use a regex methodology called S25R created by a mail admin in Japan a long time ago and it works great.
- kiwijamo 2y agoTricky thing about Google is quite a lot of my contacts are on Gmail or some domain hosted by Gmail so blocking Google's ASN is a no go for me. I'm now with Fastmail -- they use Spamassassin (plus I suspect their own custom rules) which uses a range of different metrics to determine whether an email is spam. That is is far more effective than straight up blocking ASNs and the like.
- LinuxBender 2y agoYup that's why on my mail nodes I use the S25R regular expression methodology. Google passes the regex checks.