How to Stop Spam Condoning Countries With Regular Expression Filters in cPanel.    Or How To Leverage Foreign Email Servers To Encourage Their Government To Discourage Spam Condoning IPs.   Since there is no necessity to continually update the filters it might impart a sense of urgency on the abuse enabling country to clean up their internet providers.   On going: Ticket ID: JKM-13297987  and  Ticket ID: KAI-13229733

Go to LIST.

• Whereas, neprimer.com has never consummated a business transaction in a foreign language, nor has had any communications with non English speaking countries, nor has any interest in them.
• Whereas, the neprimer.com web tech experience shows that most of the spam comes from IPs from non English speaking countries. 
• Whereas the lack of authority over, and the complexity of, spam makes it appropriate to block countries that are sympathetic to spamming IPs by blocking that country's Top Level IP including every enterprise thereunder.
• Whereas, the neprimer.com web tech believes the following parties have a stake in, and carry a part of the responsibility for minimizing spam:

*  [] hostgator.com [] (web host - opens in a new window.) which uses 
*  [] esmtp (Exim 4.69) [] email software and  
*  [] cPanel [] (web site control panel and email filtering software), 
*  The FL State Consumers Protection laws. (A recent spam seemed to have come from Miami, FL.)  File a complaint to the FL. Attorney General .  Of course any of the other US states Attorney Generals with jurisdiction could also be contacted.
*  The Federal Trade Commission [] FTC [] ( The gov agency responsible for spam control in the USA .)  
*  The Federal Bureau of Investigation [] FBI []   ( The gov agency responsible for malicious DDoS (Distributed Denial of Service) crimes in the USA .)

Therefore, the goal is to identify the Top Level spamming IPs and its country of registration and then block all of their business enterprises which might generate a small amount of commercial concern to create an incentive to clean up the spammers.

Reference:

Class Address Ranges Class A - 1.0.0.0 to 126.0.0.0 Class B - 128.0.0.0 to 191.255.0.0 Class C - 192.0.1.0 to 223.255.255.0 Class D* - 224.0.0.0 to 239.255.255.255 Class E* - 240.0.0.0 to 255.255.255.255

Class A, Class B, and Class C are the three classes of addresses used on IP networks in common practice.    Class D addresses are reserved for multi cast.    Class E addresses are simply reserved, meaning they should not be used on IP networks (used on a limited basis by some research organizations for experimental purposes).

Here are the results of a Regular Expression Filter rule that selects only the BAD IPs. [Image # 1. Bad IPs]
       1.)  The red text indicates that the Reg Ex Filter made a match on all of the IPs listed in the "Test on Text" box.  Notice that the Text box input data included both the "Good" and "Bad" IPs but there were no matches on the "Good" IPs since the filter was designed to match only the "Bad" IPs.
       2.)  In the image note the "Dialect" line where Preg is checked.  This means that it is a "Perl regular Expression" compatible tester which is what the cPanel Reg Ex Filter application requires.

 

Image # 1. Bad IPs

Here are the results of a Regular Expression Filter rule that selects only the GOOD IPs.
       The red text indicates that the Reg Ex Filter made a match on all of the IPs listed in the "Test on Text" box.  Notice that the Text box data included the "Bad" IPs but there were no matches since the filter was designed to match "Good" IPs only.  (The reason for listing the "Good" IPs here is that it might be advantageous to design a reverse Reg. Ex. Filter to Allow only eMail from the "Good" IPs and thereby Trashing all others.)

PART 4 of 4: The Application. (cPanel)