Blocking Chinese and Korean IP ranges in Exchange or Barracuda?

Does anyone know of any way or has anyone tried to block the entire (or at least a large portion) of the ip blocks assigned to China and/or Korea in Exchange or your spam filter?  If so how'd you do it?  What was the result?
LVL 14
Ben HartAsked:
Who is Participating?
 
Alan HardistyConnect With a Mentor Co-OwnerCommented:
Firstly I would get yourself onto Exchange 2003 Service Pack 2 and then have a read of the following link:

http://www.msexchange.org/tutorials/Blacklist_Support_Exchange_2003.html

I should be able to help you configure the country blacklist to block China / Korea ip's.
0
 
Alan HardistyCo-OwnerCommented:
You can use the following Block List site - I do and block a few countries via Vamsoft ORF Anti-Spam Software - www.vamsoft.com:
http://countries.nerd.dk/ 
0
 
Alan HardistyCo-OwnerCommented:
If you would like more information about how to do this - you just need to post a reply to the comment I made rather than just wait for another response.
It is not a case of wait until you see a response you like the look of and then close the question - you need to actively participate to get a result.
What version of Exchange are you using?
What Anti-Spam software have you currently got (if any)?
Can you afford $239 to buy Vamsoft ORF to do this for you?
0
Evaluating UTMs? Here's what you need to know!

Evaluating a UTM appliance and vendor can prove to be an overwhelming exercise.  How can you make sure that you're getting the security that your organization needs without breaking the bank? Check out our UTM Buyer's Guide for more information on what you should be looking for!

 
Ben HartAuthor Commented:
I apologize if I jumped the gun but it seems like my more... "obscure" questions either never get a response or only one.  With the immense membership of EE I'd expect not to be the only one wondering or actually doing something like this.  So yeah I was basically asking about opinions and I guess your the only one with one.

Don't misunderstand though, I do appreciate your response and time here.  Just annoying when more specialized or focused questions go almost untouched.

I checked your countries.nerd.dk link..even emailed the author asking for an explanation of how his lists actually represent the IP blocks.  His response was very short and not noob friendly.  But currently we are using a Barracuda Spam filter (yeah I know most people find that they suck) but I haven't had very many issues with it.  Although the lack of a more thorough category listing is kinda fail.  That's the only thing protecting our Exchange 03 box.  However we are in the process of replacing our Barracuda Web filter with a Fortinet 110c which at that time I will look into passing all SMTP data through the Forti, then the Cuda into Exchange for a sort of double-headed path.
0
 
Alan HardistyCo-OwnerCommented:
No problems - no harm done ; ) What version of Exchange have you got?

Sometimes you get a lot of responses to simple stuff on EE and not so many on the more unusual ones.  It's all down to the Expert's knowledge and if they are free to answer I suppose.

Some Experts are always about, others only in the evenings / in their free time.
0
 
Ben HartAuthor Commented:
Yeah it's rather annoying how fast questions are "abandoned" when all your doing is giving it time for more experts to see it.

It's 2003 SP1 that we use.
0
 
Ben HartAuthor Commented:
Good info, just what I needed.  Thanks so much.
0
 
Alan HardistyCo-OwnerCommented:
You are very welcome - glad to have resolved one for you.
Thanks for the points
Alan
P.S.  If you need help configuring the blacklist - just shout.
0
All Courses

From novice to tech pro — start learning today.