?

Log in

No account? Create an account

fanf

bogon spam

« previous entry | next entry »
30th Oct 2009 | 14:36

Someone from Craigslist posted to NANOG saying they were suffering from a lot of spam from unallocated IP address space. So I wrote a program which downloads the RIR allocation statistics tables, compiles a list of allocated /24 blocks, and scans Exim's logs for connections from unallocated space. It turns out we are not suffering from a lot of spam from unallocated IP address space - we get on average less than one bogon connection each day.

| Leave a comment | Share

Comments {2}

from: dwmalone
date: 30th Oct 2009 19:36 (UTC)

Does anyone upstream of you use bogon lists on their routers?

Reply | Thread

Tony Finch

from: fanf
date: 30th Oct 2009 19:46 (UTC)

I don't think so, at least not at this resolution, though they might have /8 bogon filters. We're getting accasional connections from bogon space according to my script and according to whois and according to www.cidr-report.org. (The stats files don't always agree with whois, e.g. a block owned by the Frankfurter Allgemeine Zeitung is in whios but not the stats files.)

Reply | Parent | Thread