GeoBL Usage

Zone query structure
Blocking by country or continent
Tracking connection statistics
Putting it all together
List of country codes
List of continents
Test points

Zone query structure

The GeoBL zone has extra options that can be enabled by changing the query itself. The full structure is: <reversed ip>.b[block_list].[server id].geobl.spameatingmonkey.net

Blocking by country or continent

Optional To block by country or continent you can add a blocking clause. The clause starts with the letter "b" followed by an underscore ("_") separated list of countries and continents. If, for example, you would like to block all of asia, the United States and Brazil then you would use the blocking clause of "basia_us_br" and your query for the IP 1.2.3.4 would look like: 4.3.2.1.basia_us_br.geobl.spameatingmonkey.net This configuration is always done on the client side. See the list of country codes and continents to see which codes to use.

Tracking connection statistics

You can track your server's connection statistics by country or domain by first creating an account. Once you create your account, add the IP address of your mail server to your account. After adding each one you will provided with the GeoBL zone for that specific server. For example, if your mail server's IP is 5.6.7.8, the zone will be: 84281096.geobl.spameatingmonkey.net

Putting it all together

Now that you know the structure of each component it is time to combine them into one zone. As in our previous examples, we will use 1.2.3.4 as the connecting client IP, 84281096 as the server ID and we will block all connections from Asia, The United States and Brazil. The zone will look like: basia_us_br.84281096.geobl.spameatingmonkey.net and the query for 1.2.3.4 will look like: 4.3.2.1.basia_us_br.84281096.geobl.spameatingmonkey.net
To use this config in postfix, add the following to your smtpd_recipient_restrictions section: warn_if_reject reject_rbl_client basia_us_br.84281096.geobl.spameatingmonkey.net, Remove warn_if_reject if you want to block the connection instead of just logging a warning.

List of country codes

The full list of countries that GeoBL can block are:
CodeCountryCodeCountry
a1"Anonymous Proxy" a2"Satellite Provider"
adAndorra aeUnited Arab Emirates
afAfghanistan agAntigua and Barbuda
aiAnguilla alAlbania
amArmenia anNetherlands Antilles
aoAngola apAsia/Pacific Region
aqAntarctica arArgentina
asAmerican Samoa atAustria
auAustralia awAruba
azAzerbaijan baBosnia and Herzegovina
bbBarbados bdBangladesh
beBelgium bfBurkina Faso
bgBulgaria bhBahrain
biBurundi bjBenin
bmBermuda bnBrunei Darussalam
boBolivia brBrazil
bsBahamas btBhutan
bvBouvet Island bwBotswana
byBelarus bzBelize
caCanada ccCocos (Keeling) Islands
cdthe Democratic Republic of the Congo cfCentral African Republic
cgCongo chSwitzerland
ciCote D'Ivoire ckCook Islands
clChile cmCameroon
cnChina coColombia
crCosta Rica cuCuba
cvCape Verde cxChristmas Island
cyCyprus czCzech Republic
deGermany djDjibouti
dkDenmark dmDominica
doDominican Republic dzAlgeria
ecEcuador eeEstonia
egEgypt ehWestern Sahara
erEritrea esSpain
etEthiopia eueurope
fiFinland fjFiji
fkFalkland Islands (Malvinas) fmFederated States of Micronesia
foFaroe Islands frFrance
fxMetropolitan France gaGabon
gbUnited Kingdom gdGrenada
geGeorgia gfFrench Guiana
ghGhana giGibraltar
glGreenland gmGambia
gnGuinea gpGuadeloupe
gqEquatorial Guinea grGreece
gsSouth Georgia and the South Sandwich Islands gtGuatemala
guGuam gwGuinea-Bissau
gyGuyana hkHong Kong
hmHeard Island and McDonald Islands hnHonduras
hrCroatia htHaiti
huHungary idIndonesia
ieIreland ilIsrael
inIndia ioBritish Indian Ocean Territory
iqIraq irIslamic Republic of Iran
isIceland itItaly
jmJamaica joJordan
jpJapan keKenya
kgKyrgyzstan khCambodia
kiKiribati kmComoros
knSaint Kitts and Nevis kpDemocratic People's Republic of Korea
krRepublic of Korea kwKuwait
kyCayman Islands kzKazakhstan
laLao People's Democratic Republic lbLebanon
lcSaint Lucia liLiechtenstein
lkSri Lanka lrLiberia
lsLesotho ltLithuania
luLuxembourg lvLatvia
lyLibyan Arab Jamahiriya maMorocco
mcMonaco mdRepublic of Moldova
mgMadagascar mhMarshall Islands
mkthe Former Yugoslav Republic of Macedonia mlMali
mmMyanmar mnMongolia
moMacao mpNorthern Mariana Islands
mqMartinique mrMauritania
msMontserrat mtMalta
muMauritius mvMaldives
mwMalawi mxMexico
myMalaysia mzMozambique
naNamibia ncNew Caledonia
neNiger nfNorfolk Island
ngNigeria niNicaragua
nlNetherlands noNorway
npNepal nrNauru
nuNiue nzNew Zealand
omOman paPanama
pePeru pfFrench Polynesia
pgPapua New Guinea phPhilippines
pkPakistan plPoland
pmSaint Pierre and Miquelon pnPitcairn
prPuerto Rico psOccupied Palestinian Territory
ptPortugal pwPalau
pyParaguay qaQatar
reReunion roRomania
rsRussian Federation ruRussian Federation
rwRwanda saSaudi Arabia
sbSolomon Islands scSeychelles
sdSudan seSweden
sgSingapore shSaint Helena
siSlovenia sjSvalbard and Jan Mayen
skSlovakia slSierra Leone
smSan Marino snSenegal
soSomalia srSuriname
stSao Tome and Principe svEl Salvador
sySyrian Arab Republic szSwaziland
tcTurks and Caicos Islands tdChad
tfFrench Southern Territories tgTogo
thThailand tjTajikistan
tkTokelau tlEast Timor
tmTurkmenistan tnTunisia
toTonga trTurkey
ttTrinidad and Tobago tvTuvalu
twProvince of China Taiwan tzUnited Republic of Tanzania
uaUkraine ugUganda
umUnited States Minor Outlying Islands usUnited States
uyUruguay uzUzbekistan
vaHoly See (Vatican City State) vcSaint Vincent and the Grenadines
veVenezuela vgBritish Virgin Islands
viU.S. Virgin Islands vnVietnam
vuVanuatu wfWallis and Futuna
wsSamoa yeYemen
ytMayotte yuYugoslavia
zaSouth Africa zmZambia
zrZaire zwZimbabwe

List of continents

If you would like more aggressive blocking then you may block by continent. The continent codes are: africa, antarctica, asia, europe, north-america, oceania, south-america.

Test points

There is a special use blocking flag of 'all' that will return a positive response on all queries. This is useful for testing purposes only. For example, checking the IP 1.2.3.4 using the query 4.3.2.1.ball.geobl.spameatingmonkey.net will return the following: $dig +short -t any 4.3.2.1.ball.geobl.spameatingmonkey.net
127.0.0.2
"Blocked by admin request, see http://spameatingmonkey.com/geobl/blocked.html?h=1.2.3.4&c=All&m=all"