Re: [mod-security-users] [OT] Japanese spammer

[Ivan R. <iv...@we...>]

Tomoyuki Sakurai wrote:

> kawaneba.net, aka mutoh, is one of well-known Japanese spammers.
> 
> If you are a mail admin, you can safely block all traffic from the
> following rDNS.
> 
> (tokyo|tokushima|fukuoka|osaka|okayama|kyoto).ocn.ne.jp
> yournet.ne.jp
> ap.net-access.jp
> 
> If you are concern anout FP, just reject with 4xx in SMTP session. The
> spammer don't care about SMTP reply code, anyway.
> 
> | Received: from p2220-ipad68marunouchi.tokyo.ocn.ne.jp
> | ([220.96.32.220]:4774 helo=79.14.26.18)

   I've now restricted the posting privilege only to list members,
   so this shouldn't happen any more.

-- 
ModSecurity (http://www.modsecurity.org)
[ Open source IDS for Web applications ]