Postfix has a facility for this, called smtpd_sasl_exceptions_networks. It basically denies SASL auth to IP's from the specified ranges. Disregarding IPv6 for now, here's a list of IP ranges from IANA that are non-US (ARIN) allocations:
smtpd_sasl_exceptions_networks = 0.0.0.0/7 2.0.0.0/8 5.0.0.0/8 10.0.0.0/8 14.0.0.0/8 25.0.0.0/8 27.0.0.0/8 31.0.0.0/8 36.0.0.0/8 37.0.0.0/8 39.0.0.0/8 41.0.0.0/8 42.0.0.0/7 46.0.0.0/8 49.0.0.0/8 51.0.0.0/8 53.0.0.0/8 57.0.0.0/8 58.0.0.0/7 60.0.0.0/7 62.0.0.0/8 77.0.0.0/8 78.0.0.0/7 80.0.0.0/4 101.0.0.0/8 102.0.0.0/7 105.0.0.0/8 106.0.0.0/8 109.0.0.0/8 110.0.0.0/7 112.0.0.0/4 133.0.0.0/8 141.0.0.0/8 145.0.0.0/8 150.0.0.0/7 153.0.0.0/8 154.0.0.0/8 163.0.0.0/8 171.0.0.0/8 175.0.0.0/8 176.0.0.0/4 193.0.0.0/8 194.0.0.0/7 196.0.0.0/7 200.0.0.0/6 210.0.0.0/7 212.0.0.0/7 217.0.0.0/8 218.0.0.0/7 220.0.0.0/6
No comments:
Post a Comment