HE BGP Toolkit scraper

[dcdan]

http://whosspamming.us/list.php?provider=all&list=all

How do we (IT7 Networks) get "delisted"? Two records show our prefixes announced for us by B2 as we still have a few boxes with them.

 

[HalfEatenPie]

http://whosspamming.us/list.php?provider=all&list=all

How do we (IT7 Networks) get "delisted"? Two records show our prefixes announced for us by B2 as we still have a few boxes with them.

Howdy there! It's probably best for you to move your question to here:

Also, talk with your upstream provider to get you delisted.

 

[Kris]

Server load dropped from a constant .85 - 1 to around : .08 - 25 after adding these. No need to query RBLs, waste I/O, etc.

Could be co-incidental, but the client's box has almost no spam coming in now except for every few hours, not ever few minutes. 

Thanks D. Strout, I wish I could give gold for this... Err that's Reddit. 

 

[Kris]

Hey D-Strout, could you maybe once every 12 hours echo out the raw CC + SM output into a text file for use in firewalls ? 

 

Would drop into APF firewall very easily, and fetch them all on restart and auto-update new blocks. 

 

 

##

# Global Trust

##

# This is an implementation of the trust rules (allow/deny_hosts) but

# on a global perspective. You can define below remote addresses from

# which the glob_allow/deny.rules files should be downloaded from on

# a daily basis. The files can be maintained in a static fashion by

# leaving USE_RGT=0, ideal for a host serving the files.

USE_RGT="0"

 

GA_URL="yourhost.com/glob_allow.rules"

GA_URL_PROT="http"

 

GD_URL="yourhost.com/glob_deny.rules"

GD_URL_PROT="http"

 

[gbshouse]

Try http://www.team-cymru.org/Services/ip-to-asn.html or http://www.cidr-report.org/as2.0/

The bgp.he.net is not the best or enough accurate source