Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Blocking Traffic by Country on Production Networks
Timothy M. Mullen

When I originally posted to Bugtraq regarding the use of country-by-country sets to control traffic to or from any particular country, I knew that it was not a new idea. However, applying the concept for use with Microsoft's ISA Server was at least a new application for it, and apparently has had some utility for people based on the thousands of downloads that have been made of the free sets from the Hammer of God Web site.

Comments Mode:
Blocking Traffic by Country on Production Networks 2008-10-31
Anonymous (1 replies)
it may be easier to just look up the class A's, B's, and C's assigned to RIPE NCC, AfriNIC, APNIC, LACNIC and then start blocking from there...I've blocked roughly 125 net's that have now reduced 98% of the spam registered users for a site I manage...

http://www.afrinic.net/

http://www.apnic.net/

http://www.lacnic.net/

http://www.ripe.net/

ARIN of course for N. America

http://www.arin.net/

You can also try http://www.countryipblocks.net which allows you to selectively choose what countries you want IP blocks for, and even spits it out into .htaccess (allow or deny format), CIDR, decimal/CIDR, etc.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/infocus/1900/1212#1212







 

Privacy Statement
Copyright 2009, SecurityFocus