Contributed by jose on from the auto-firewall dept.
"I wrote a small PERL script to convert http://spews.org/spews_list_level2.txt to pf packet filtering rules. It should work as well for the Level 1 list.A useful utility to manage a lot of information and dynamically build PF rulesets.On any given day this creates about 12000 rules. Theo says this quantity is no problem.
It seems to work quite well. Spam has stopped and other mail comes through.
Not only has the spam stopped but after a couple of days I noticed that much of the other malicious traffic to my server has dwindled as well.
Regardless of the controversy as to whether this should be done (denying packets) because it causes the sending computer to think it has encountered network problems, it's my computer.
The script is available at: http://makeashorterlink.com/?B2E7214D1 which will direct you to the Usenet archive on google.com.
If you have difficulty with the URL let me know. Perhaps we can post the script here.
Harry"
(Comments are closed)
By Idunno () on
By Anonymous Coward () on
I clicked the more link only to see an error that the message didn't exist. Upon reload the article was gone...
Anyone in the know?
By Anonymous Coward () on
By W () on
By Anonymous Coward () on
By edu () on
I had a funny incident when at work one of our clients mail server got blacklisted, because someone broke in to it and made it an open relay. Apparently no one would have noticed this unless their mail would have stopped coming through to our servers...
By Peter Hessler () spambox@theapt.org on http://www.theapt.org
Q42: My IP address/range is being listed by SPEWS but I'm not a spammer and I just signed up for this/these address(s). What can I do to be removed from the list?
A42: SPEWS is just an automated system, if spam or spam involvement (hosting spammers, selling spamware) from your IP address/range ceases, it will drop out of the list in time. Normally the listing involves spam related problems with your host and the first step you need to take is to complain to them about the listing, in almost all cases, they are the only people who can get an address/range out of the SPEWS list. If there is a spam related problem with your host, their IP address/range will not be removed until it is resolved. If you are certain a listing mistake has been made, post a message in a public forum mentioned above with the SPEWS record number (eg. S123) and/or your IP address/range information in it. Placing the text "SPEWS:" in the subject can help a SPEWS editor or developer see the message and they may double check the listing - note that, although others may, no SPEWS editor or developer will ever reply to the posting. Will this get your IP address/range removed from a SPEWS listing? Not if there are currently spam related problems with your host. Be aware that posting ones email address to any publicly viewable forum or website makes it instantly available to spammers. If you're concerned about getting spammed, change or "mung" the email address you use to post with.
By Anonymous Coward () on
By Sim () sim@documentroot.com on mailto:sim@documentroot.com
Keep you from getting hacked, DOS'ed, etc.