Link to home
Start Free TrialLog in
Avatar of hack-4-good
hack-4-good

asked on

is there a ready-made list of non-US ip addresses?

hello,

looking for a ready-made list of non-us ip addresses... either in csv format for import or straight text (ip tab subnet, per line).  this is for importing into a spam filter.

our company doesnt currently do any business with anyone who should be sending from an oversea mail server, and we're ok taking the risk that one or two legit emails will be blocked (we can retrieve it later).

we're using ORF from www.vamsoft.com  and i'm sick of going thru the log by hand, just to find that 90% of the spam that still gets thru, is from other countries.

a sample straight text file that could be imported is like this:

8.10.16.0      255.255.255.0
24.180.20.70      255.255.255.255
24.199.183.0      255.255.255.0
24.199.183.106      255.255.0.0
61.0.0.0      255.0.0.0

the formatting may look messed up here, but its   ip [tab] subnet [enter]

i'm ok understanding subnetting, ranges, etc... and i'm ok blocking 18 million ip addresses too...  is there something i can just copy/paste rather than sit on www.dnsstuff.com all day and look up every range?

it gets complicated doing that because 84.24.0.0 might be US, but 84.23.0.0 might be taiwan.  i wish it was more organized, where the first octet indicated country... or something... but i realize how not possible that really is.

thanks!

p.s. i understand that not all overseas people or ISPs send spam... but most of what we get is from overseas and i'm ok blocking all non-us servers.  if thats prejudicial, whatever... to each his own...

ASKER CERTIFIED SOLUTION
Avatar of pseudocyber
pseudocyber

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of pseudocyber
pseudocyber

Not sure if you realize what these mean, for instance the first one 041/8 means anythig in the classful "A" notation - 41.0.0.0 255.0.0.0 would be allocated from the Africa authority.

So, you could use Excel to replace "/8" with ".0.0.0 255.0.0.0"
Avatar of Rob Williams
pseudocyber, why don't you post a link to this question on the following :
https://www.experts-exchange.com/questions/21773565/United-States-Subnets.html
Excellent answer above to that question and hardly seems fair for me to steal the credit, especially where I was advocating it wasn't possible.
--Rob  (RobWill)
Rob, I didn't know about that question.  I just remembered the list I compiled a little while ago and went to find it.  Then I was discussing with my ccie wannabe coworker and he was telling me abou the bogon list.

Don't understand your excellent answer comment - are you referring to your link or my comments?

:)
Oh, now I understand ... Thanks Rob. :)
Avatar of hack-4-good

ASKER

guys, thanks... this is exactly what i was looking for...

thanks again
>>"Don't understand your excellent answer comment"
pseudocyber, guess you figured out but I was referring to your comments above. I thought they were very good, and would be useful to tabmpierce in the other question. I didn't want to steal the credit. Would be embarrassing if I was awarded points for your answer.  :-)
--Rob
No problem, Rob.  Thanks for the compliment.  :)