# Reserved Ranges
0.0.0.0/8 REJECT IP address of MX is IANA reserved range
10.0.0.0/8 REJECT IP address of MX is a RFC1918 address
127.0.0.0/8 REJECT IP address of MX is IANA reserved range
169.254.0.0/16 REJECT IP address of MX is a APIPA address
172.16.0.0/12 REJECT IP address of MX is a RFC1918 address
192.0.2.0/24 REJECT IP address of MX is IANA reserved range
192.168.0.0/16 REJECT IP address of MX is a RFC1918 address
198.18.0.0/15 REJECT IP address of MX is IANA reserved range
224.0.0.0/3 REJECT IP address of MX is IANA reserved range
240.0.0.0/12 REJECT IP address of MX is IANA reserved range


# WILDCARDS
62.4.64.119 REJECT IP address of MX host is a wild-card NU.
64.18.138.88 REJECT IP address of MX host is a wild-card CG.&RW.
64.70.19.33 REJECT IP address of MX host is a wild-card WS.
69.25.75.72 REJECT IP address of MX host is a wild-card NU.
72.20.110.8 REJECT IP address of MX host is a wild-card pjn.qsrch.net.
72.249.38.50 REJECT IP address of MX host is a wild-card MP.
72.51.36.133 REJECT IP address of MX host is a wild-card PH.
81.29.204.106 REJECT IP address of MX host is a wild-card TK.
89.255.3.140 REJECT IP address of MX host is a wild-card TK.
193.33.61.2 REJECT IP address of MX host is a wild-card TK.
193.33.61.9 REJECT IP address of MX host is a wild-card TK.
195.178.186.40 REJECT IP address of MX host is a wild-card ST.
195.7.77.20 REJECT IP address of MX host is a wild-card MUSEUM.
198.32.6.80 REJECT IP address of MX host is a wild-card UM.
202.30.50.177 REJECT IP address of MX host is a wild-card KR.
209.172.59.193 REJECT IP address of MX host is a wild-card TK.
209.85.51.245 REJECT IP address of MX host is a wild-card ET.
212.181.91.6 REJECT IP address of MX host is a wild-card NU.
213.146.149.143 REJECT IP address of MX host is a wild-card LA.
217.119.57.19 REJECT IP address of MX host is a wild-card TK.

check_sender_mx_access cidr:/etc/postfix/bogus_mx.cidr

postfix reload

#!/bin/bash

curl -s ftp://ftp.internic.net/domain/root.zone.gz | \
gunzip -c | \
awk ' / NS / {if (length($1) > 1) print "_."$1}' | \
sort -u | \
#Zum sort:
sort -b -t. -k1,1n -k2,2n -k3,3n -k4,4n| \

#sortiert IP-V4 Adressen numerisch nach 1., 2., 3. und 4. Zahl


dig -f - +noall +answer | \
awk ' $5 ~ /[0-9]+\.[0-9]+\./ {
gsub("_.","",$1);
print $5" REJECT IP address of MX host is a wild-card "$1
}' | \
sort -g | \
awk ' BEGIN{
oline=""; }
{
if (NR>1) {
if( length(oline) > 0) {
split(oline,arr);
if ($1==arr[1]) {
oline=oline"&"$11;
}
else {
print oline;
oline=$0;
}
}
else {
oline=$0;
}
}
else {
oline=$0;
}
}
END{ print oline;}'