Back to Community Threads
[Feature Request] IP-Blacklist more flexible
Idea shared by Martin Schaible - 11/18/2021 at 11:27 AM
Proposed
I really love the Blacklist to block certain IP adresses, ranges and even CIDR-Blocks.

My list grows weekly by blocking whole datacenters from eastern europe. It looks like, that theses datacenters are directly involved in, let's say, certain activities.

It would be great, that an entry could be more flexible as comma delimited list by having a mix of addresses, ranges and CIDR-Blocks.

Examples:

123.123.123.0/24, 234.234.234.0/24, 112,112,112.0/24
123.123.123.4-123.123.123.10, 112,112,112.99-112,112,112.144

Yes, your guy who is in charge to program a parser, will have some work :-) But it will be more than worthy.
There are some good github projects like https://github.com/lduchosal/ipnetwork that work really well for exactly this.
Maybe my feature request wasn't really well written. I'm asking for more flexibilty for adding Ip-addresses, ranges and CIDR-Blocks in SmarterMail.
Oh no, I meant it wouldnt be too much for SmarterTools to add it in as there are great github projects for exactly what you are wanting :)
I would like to know, if a person of SmarterTools did read this post.
But why do it on smartermail and not on the firewall?
Blocking IPs taken from lists is more efficient.
Maybe using a UTM firewall is even easier
Sabatino Traini Chief Information Officer Genial s.r.l. Martinsicuro - Italy
Kyle Kerst Replied
3/22/2022 at 4:44 PM
Employee Post
@Martin: While we do try to review all community posts we are not always able to address each one individually. With that being said, we do appreciate and encourage user feedback and are monitoring your post to assess interest level for the request.
Kyle Kerst Lead Internal Network/System Administrator SmarterTools Inc. smartertools.com
Tony Scholz Replied
3/23/2022 at 1:40 PM
Employee Post
Hello Martin, 

I wanted to follow up on this post to let you know that we do current have this option and you can add a comma delimited list, The one downside currently ( or not depending on the situation ) is that the "Description" ends up being the same. For example, if I add this;

123.123.123.0/24, 1.2.3.4, 111.0.22.12-111.1.1.1
to my blacklist, all three will be added at the same time. 



I hope this helps 

Tony
Tony Scholz Lead Network/System Administrator SmarterTools Inc. www.smartertools.com
Hi Tony
I tested this with the combination below. SmarterMail added two lines, like you showed. Therefore it doesn't really help. At the end of the day, it is the same, as i would add each CDIR.
Depending on what is going on, we're adding periodic new CDIRs. It is an ongoing process. After a while, you have tons of CDIR related eg. to a datacenter which supports spammers. Actually we have around 100 Rows with CDIRs. This is a real example:


Therefore it would be great, to have real "groups" of blocked items.

Thanks!

Martin
I'm not really sure how effective nation blocking is these days. Seems like your just chasing your tail, but here's another simple automated project for blocking countries using windows firewall. https://github.com/gregsitservices/ip-security
Back to Community Threads

Reply to Thread

Enter the verification text
Related Knowledge Base Articles
Key Feature and Version Milestones in SmarterMailSmarterMail
SmarterMail and Network Address Translation (NAT)SmarterMail > Troubleshooting
Deploying Rspamd For Use With SmarterMailSmarterMail > Server Configuration and Management
554 Error - MTA Poor Reputation FixesSmarterMail > Troubleshooting
Find a Compromised AccountSmarterMail > Troubleshooting