blocking a lot of ips?

[FiReC]

say i need to block about 700 class c ips from a server, what would be the most effective way of doing so?

I've tried htaccess but the with that many lines it really slows things down.

I'm thinking there has to be a better solution using iptables or an access list somewhere. Any help would be appreciated.

[JFPdude]

Whoa ... thats why I can't download the rest of the internettyweb thingy.


Depending on the OS your running yes iptables or ipchains will do it better than .htaccess

[FiReC]

how does freebsd handle 700+ entries in iptables?

[JFPdude]

never tried 700 ... can only comment on 30 to 40 ... 30 or 40 in .htaccess slows the server in IPtables never seen any significant resource drop

[JohnnyUtah]

iptables ... you wont even see a slowdown.

htaccess is shit for serious biz like that.

[FiReC]

thanks for the info man