IP blacklist Range ?

[jakeboyle1]

It would be great to add a range of IPs to the blacklist rather than one at a time

These guys us address from IP 66.199.254.210 to 66.199.254.218 distribute spam that gets through every filter. The ip address changes by the last digit every few days.
I am bored of adding them one by one - I would like to add the whole range.
They use other ranges as well.
They always have very long domain names.

(i'd prefer for the spam detection to detect them in the first place)

[magicspam]

Hello jakeboyle1,

Thank you for your post and your question. Unfortunately, we do not support IP ranges or networks in our exemption lists. However, the IP addresses you listed are on one of our IP Reputation list, under MIPSpace-All and MIPSpace-Poor. Simply enable those list under the "IP Reputation" and let us know if it resolves the issue.

Thank you for supporting Magicspam!

-- MagicSpam Support Team --

[jakeboyle1]

I have enabled it now. I used to have it enabled but it caught legitimate emails as well.
I would still love to be able to block all addresses in a range.
for example 69.51.2.0/24.
Every ip on this range is spammer. Yet they pass all the default spam checks.

[magicspam]

Hello jakeboyle1,

Thank you for your reply.

In regards to the legitimate email messages that were marked as spam, you may consider whitelisting those addresses to allow those emails to bypass MagicSpam's rejection system. Simply do the following:

1.) Click on the 'Log' page in your control panel.
2.) Fill in the proper search criteria (eg. goodsender@email.com in the 'Sender' field) then click 'search'
3.) Locate the legitimate email address, click on the address and simply click on "Allow Sender"

This will ensure that emails coming in from that email address will not be rejected by MagicSpam.

We would also like to audit these wrongfully marked ham messages. Would you kindly send us sample entries from your log file (either from your MagicSpam Log interface or from /var/log/mslog) to support@magicspam.com so that our audit team will further investigate these missed spam messages.

Please let us know if you require any additional assistance. Thank you.

-- MagicSpam Support Team --

[jakeboyle1]

I have sent a list in.

The reason they don't get caught is because they seem to own three entire ranges from x.x.x.0 to 255 and on each range they set up a valid domain - they then spam people for about 3 days before moving onto the next website/ip and doing it over again. Adding the IP address one at a time from the logs is very tedious and ineffective within a day or so as the IP keeps changing.

This is why being able to block a full range of IPs would be a really useful feature. These guys are working through 762 different IPs before they run out. Here are the ranges


50.2.167.0 - 255
69.51.2.0 - 255
66.199.254.0 - 255

[magicspam]

Hello jakeboyle1,

Thank you for your post, and thank you for providing the IP range.

We will let our spam auditors know about these newly found IP addresses. It is unfortunate to hear that you are one of the first to get hit with the unwanted message.

As far as the other IP addresses go, they are listed on the MIPSpace-Poor list. It is recommended that you enable that list as well.

If you have any other questions or comments, feel free to send us an email or post on the forums. We want to thank you for your contribution.

-- MagicSpam Support Team --

[jakeboyle1]

As I previously said, Mipspace-poor also catching mailchimp conversations/replies and is therefore not a viable solution.
I would need to whitelist all the mailchimp servers.

This would mean i need a bulk ip whitelist functionality as well as bulk ip blacklist functionality.

I think you will find that many other diligent server operators would also want the same functionality as me.
I can't think of a reason why you wouldn't offer this functionality.
thanks

[jakeboyle1]

I have found a way of achieving my goal on plesk firewall.
For any one else reading this..

I just added the IP ranges in the firewall and deny on port 25.
Deny incoming from 50.2.141.0/24, 66.199.254.0/24, 69.51.2.0/24 on port 25/tcp

But I still think you should add this functionality to magic spam !

[magicspam]

Hello jakeboyle1,

Thank you for your feedback and your contribution.

With regards to IP range blacklisting, we would like to let you know that we have passed this information on to our development team where they will examine this implementation further.

If you have any other feature requests or issues, please let us know. Thank you.

-- MagicSpam Support Team --

[hs132]

I want to echo the request to block a range of IPs, ideally using the CIDR syntax. I have a long list of IP ranges I've had to add to my firewall's deny list because the usable blocklists don't catch spam from these IPs. (the MIPSpace-Poor list does catch some of these, but also blocks too many legitimate emails.)

Here's the list I have so far - those darned .top domains keep sending from new IP ranges every day:

104.148.121.0/24, 104.167.96.0/19, 109.200.216.0/23, 131.72.136.0/24, 157.52.155.0/24, 162.244.80.0/22, 162.254.191.0/24, 170.178.180.160/27, 176.119.26.0/24, 185.143.240.0/22, 185.26.146.0/24, 23.247.54.0/23, 23.250.116.0/24, 23.81.44.0/22, 23.94.83.64/26, 36.85.64.0/20, 45.58.188.0/18, 46.148.22.0/24, 46.166.176.0/21, 49.248.128.0/18, 49.71.210.255/16, 63.246.128.0/19, 66.111.36.0/24, 66.37.3.80/28, 66.55.156.224/28, 69.50.192.0/19, 74.126.176.0/23, 93.115.24.0/21, 94.74.73.0/24

I'd much rather MagicSpam block these so that 1) the sender gets a bounce message and 2) I can see entries in the log. Blocking at the firewall hides these from view.