Avian’s Blog

I've just blacklisted the following blocks of IPs on mail.tablix.org:

196.217.0.0/16
196.206.0.0/16
41.250.0.0/16

According to the Whois database, they all belong to some Moroccan ISP.

Last week I've been getting incredible amount of spam from there. I can handle spam sent to my personal email account (it gets filtered anyway), but these guys have been sending spam to the tablix.org's mailing list manager address with my address in the Sender field. That way I got some 200 bounces from my own machine telling me I issued a wrong mailing list command.

Luckily they only used my address. I would hate to think that other people would be getting such mails from my server because of some stupid spammer.

So, if you're from Morocco and can't send mail to any mail accounts at tablix.org, go bug your ISP or something. I'll try to remove the blacklist entries when I don't see any rejected messages in my logs for a month or so.

By the way, these IPs are from the same block as those that caused problems with the mailing list manager this June.