Banning country on root level? - GoFuckYourself.com

Klen · 12-08-2007, 10:21 AM

Is it possible to ban entire country ip rang on root level(for entire dedicated server)?

SmokeyTheBear · 12-08-2007, 10:25 AM

anything is possible if you try ..

well at least thats what they tell you in school.

so i tried to toss my teacher off the roof , but it didnt work .. those liars.

p.s. yes its possible.. well kinda.. you wont get everyone obviously but..

p.s.s. why would you want to ban an entire country ?

scottybuzz · 12-08-2007, 10:31 AM

one reason may be that for example he cant convert chinese traffic to save his life, so instead of them leeching bandwidth, klen simply wants to not allow them to enter.

[ScreaM] · 12-08-2007, 10:34 AM

There was a good site that had all the IP ranges. I don't have it coz I lost all my bookmarks.

Anyone?

rowan · 12-08-2007, 10:49 AM

You can ban by registrar range but they usually cover such a wide geographical area that it's impractical.

Case in point: many people ban 202.* and 210.* because they're "asian" IPs, however these ranges are also allocated to Australian and New Zealand ISPs.

Klen · 12-08-2007, 11:26 AM

I want to ban country Turkey beacuse hackers from there third time penetrated into my server and causing me damage(since i have tgp sites where every second of downtime/unavaibility is disaster)

rowan · 12-08-2007, 11:32 AM

Banning Turkish IPs won't stop hackers, they'll just find an open proxy or zombie machine from a non banned area.

Klen · 12-08-2007, 11:46 AM

Quote:

Originally Posted by rowan

Banning Turkish IPs won't stop hackers, they'll just find an open proxy or zombie machine from a non banned area.

Funny you replied,sloth trader is a security hole which they used to penetrate.
I know they can use proxy,but if i redirect their ip to some "Alah" site they could think i have "proper" site.

GrouchyAdmin · 12-08-2007, 12:00 PM

The easiest bandaid way would be to use mod_geoip and the free country database by MaxMind.

A slightly better solution would be to extract the IP ranges for this, and ban it at the server.

A much better solution would be to decide why you'd want to ban an entire country instead of finding someone who can use that traffic, and offering for a trade.

chaze · 12-08-2007, 12:07 PM

Yeah maxmind is your best bet, but the issue is that the ip's can get resold to anywhere in the world after a business loses them.

so scammers wait for them to drop and grab them so they can seem from a different location.

raymor · 12-08-2007, 12:08 PM

Doing lookups on each IP that hits your server could get VERY expensive in
terms of resource usage. Instead I would look at the actual IP ranges that
seem to be problem and block them in iptables.

GrouchyAdmin · 12-08-2007, 12:23 PM

Quote:

Originally Posted by raymor

Doing lookups on each IP that hits your server could get VERY expensive in
terms of resource usage. Instead I would look at the actual IP ranges that
seem to be problem and block them in iptables.

I don't think anybody's gonna ban by /32, Ray.

Well, then again...

12-08-2007, 10:21 AM	#1
Klen Industry Role: Join Date: Aug 2006 Location: Little Vienna Posts: 32,235	Banning country on root level? Is it possible to ban entire country ip rang on root level(for entire dedicated server)?

12-08-2007, 10:25 AM	#2
SmokeyTheBear ►SouthOfHeaven Join Date: Jun 2004 Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer Posts: 28,609	anything is possible if you try .. well at least thats what they tell you in school. so i tried to toss my teacher off the roof , but it didnt work .. those liars. p.s. yes its possible.. well kinda.. you wont get everyone obviously but.. p.s.s. why would you want to ban an entire country ? __________________ hatisblack at yahoo.com

12-08-2007, 10:31 AM	#3
scottybuzz Too lazy to set a custom title Industry Role: Join Date: May 2006 Location: NY Posts: 14,800	one reason may be that for example he cant convert chinese traffic to save his life, so instead of them leeching bandwidth, klen simply wants to not allow them to enter. __________________ $$$$$ MAKE HUGE MONEY IN CAMS - CLICK HERE $$$$$

12-08-2007, 12:00 PM	#9
GrouchyAdmin Now choke yourself! Industry Role: Join Date: Apr 2006 Posts: 12,085	The easiest bandaid way would be to use mod_geoip and the free country database by MaxMind. A slightly better solution would be to extract the IP ranges for this, and ban it at the server. A much better solution would be to decide why you'd want to ban an entire country instead of finding someone who can use that traffic, and offering for a trade. __________________ AIM: GrouchyGfy

12-08-2007, 12:08 PM	#11
raymor Confirmed User Join Date: Oct 2002 Posts: 3,745	Doing lookups on each IP that hits your server could get VERY expensive in terms of resource usage. Instead I would look at the actual IP ranges that seem to be problem and block them in iptables. __________________ For historical display only. This information is not current: support@bettercgi.com ICQ 7208627 Strongbox - The next generation in site security Throttlebox - The next generation in bandwidth control Clonebox - Backup and disaster recovery on steroids

12-08-2007, 10:34 AM	#4
[ScreaM] Confirmed User Join Date: Jan 2005 Posts: 1,664	There was a good site that had all the IP ranges. I don't have it coz I lost all my bookmarks. Anyone?

12-08-2007, 10:49 AM	#5
rowan Too lazy to set a custom title Join Date: Mar 2002 Location: Australia Posts: 17,393	You can ban by registrar range but they usually cover such a wide geographical area that it's impractical. Case in point: many people ban 202.* and 210.* because they're "asian" IPs, however these ranges are also allocated to Australian and New Zealand ISPs.

12-08-2007, 11:26 AM	#6
Klen Industry Role: Join Date: Aug 2006 Location: Little Vienna Posts: 32,235	I want to ban country Turkey beacuse hackers from there third time penetrated into my server and causing me damage(since i have tgp sites where every second of downtime/unavaibility is disaster)

12-08-2007, 11:32 AM	#7
rowan Too lazy to set a custom title Join Date: Mar 2002 Location: Australia Posts: 17,393	Banning Turkish IPs won't stop hackers, they'll just find an open proxy or zombie machine from a non banned area.

12-08-2007, 12:07 PM	#10
chaze Confirmed User Industry Role: Join Date: Aug 2002 Posts: 9,752	Yeah maxmind is your best bet, but the issue is that the ip's can get resold to anywhere in the world after a business loses them. so scammers wait for them to drop and grab them so they can seem from a different location.