Banning country on root level?

Collapse
X
Collapse
 
  • Page of 1
  • Time
  • Show
Clear All
new posts
Previous template Next
  • Klen
    • Aug 2006
    • 32234
    #1

    Banning country on root level?

    Is it possible to ban entire country ip rang on root level(for entire dedicated server)?
    Tags: None
    • SmokeyTheBear
      ►SouthOfHeaven
      • Jun 2004
      • 28609
      #2
      anything is possible if you try ..

      well at least thats what they tell you in school.

      so i tried to toss my teacher off the roof , but it didnt work .. those liars.

      p.s. yes its possible.. well kinda.. you wont get everyone obviously but..

      p.s.s. why would you want to ban an entire country ?
      hatisblack at yahoo.com

        Comment

        • scottybuzz
          Too lazy to set a custom title
          • May 2006
          • 14799
          #3
          one reason may be that for example he cant convert chinese traffic to save his life, so instead of them leeching bandwidth, klen simply wants to not allow them to enter.
          $$$$$ MAKE HUGE MONEY IN CAMS - CLICK HERE $$$$$

            Comment

            • [ScreaM]
              Confirmed User
              • Jan 2005
              • 1664
              #4
              There was a good site that had all the IP ranges. I don't have it coz I lost all my bookmarks.

              Anyone?

                Comment

                • rowan
                  Too lazy to set a custom title
                  • Mar 2002
                  • 17393
                  #5
                  You can ban by registrar range but they usually cover such a wide geographical area that it's impractical.

                  Case in point: many people ban 202.* and 210.* because they're "asian" IPs, however these ranges are also allocated to Australian and New Zealand ISPs.

                    Comment

                    • Klen
                      • Aug 2006
                      • 32234
                      #6
                      I want to ban country Turkey beacuse hackers from there third time penetrated into my server and causing me damage(since i have tgp sites where every second of downtime/unavaibility is disaster)

                        Comment

                        • rowan
                          Too lazy to set a custom title
                          • Mar 2002
                          • 17393
                          #7
                          Banning Turkish IPs won't stop hackers, they'll just find an open proxy or zombie machine from a non banned area.

                            Comment

                            • Klen
                              • Aug 2006
                              • 32234
                              #8
                              Originally posted by rowan
                              Banning Turkish IPs won't stop hackers, they'll just find an open proxy or zombie machine from a non banned area.
                              Funny you replied,sloth trader is a security hole which they used to penetrate.
                              I know they can use proxy,but if i redirect their ip to some "Alah" site they could think i have "proper" site.

                                Comment

                                • GrouchyAdmin
                                  Now choke yourself!
                                  • Apr 2006
                                  • 12085
                                  #9
                                  The easiest bandaid way would be to use mod_geoip and the free country database by MaxMind.

                                  A slightly better solution would be to extract the IP ranges for this, and ban it at the server.

                                  A much better solution would be to decide why you'd want to ban an entire country instead of finding someone who can use that traffic, and offering for a trade.

                                    Comment

                                    • chaze
                                      Confirmed User
                                      • Aug 2002
                                      • 9774
                                      #10
                                      Yeah maxmind is your best bet, but the issue is that the ip's can get resold to anywhere in the world after a business loses them.

                                      so scammers wait for them to drop and grab them so they can seem from a different location.
                                      Like the desert needs the rain
                                      We do fully manged WordPress, VPS, and Servers. Adult Host Pro https://adulthostpro.com/ Since 2001

                                        Comment

                                        • raymor
                                          Confirmed User
                                          • Oct 2002
                                          • 3745
                                          #11
                                          Doing lookups on each IP that hits your server could get VERY expensive in
                                          terms of resource usage. Instead I would look at the actual IP ranges that
                                          seem to be problem and block them in iptables.
                                          For historical display only. This information is not current:
                                          support@bettercgi.com ICQ 7208627
                                          Strongbox - The next generation in site security
                                          Throttlebox - The next generation in bandwidth control
                                          Clonebox - Backup and disaster recovery on steroids

                                            Comment

                                            • GrouchyAdmin
                                              Now choke yourself!
                                              • Apr 2006
                                              • 12085
                                              #12
                                              Originally posted by raymor
                                              Doing lookups on each IP that hits your server could get VERY expensive in
                                              terms of resource usage. Instead I would look at the actual IP ranges that
                                              seem to be problem and block them in iptables.
                                              I don't think anybody's gonna ban by /32, Ray.

                                              Well, then again...

                                                Comment

                                                Previous template Next
                                                Working...