Blocking a whole countries ip

[DaDevil]

If i say wanted to block all ips from china how would i do it?

-Thanks.

 

[TaiLZ]

Find out China's range of ips, the start of it anyway. and ban say 22.XX.XX.XX

 

[DaDevil]

Ok thanks.

 

[Fahad_1]

There will be a lot of IP ranges for a specific country.

I have an uptodate database of ip-country database. Its hosted somewhere in the net.

Reply if u really need it.

 

[DaDevil]

Yeah thanks Fahad, that would be really helpful.

 

[TaiLZ]

http://www.okean.com/china.txt

Theres a list there.

 

[Darknight]

http://www.okean.com/china.txt

Theres a list there.

I would like to ban china too
No idea why just bored...

 

[amz]

Find out China's range of ips, the start of it anyway. and ban say 22.XX.XX.XX

That is an incredibly stupid way to do that!

Do you have any idea how many IP ranges you would have to block?

The best solution for that is to get mod_geoip from maxmind.com
and install the module for Apache which will add a new variable
to all visitor connections identifying their country.

Once that is installed, you could just put the following in .HTACCESS:

SetEnvIfNoCase GEOIP_COUNTRY_CODE (CN|HK) bad_country

<Files *>
Order Allow,Deny
Allow from all
Deny from env=bad_country
</Files>

(The above example would block CHINA and HONG KONG from your site)

New updates for the country database file for the module comes
out at the beginning of each new month and you can setup a cron job
easy enough to pull the new databases whenever they are released.

http://www.maxmind.com/app/geoip_country

For those unfortunate enough to be on reseller accounts or not
know how to compile apache modules, Maxmind also has a number
of other engines for PHP and Perl, etc which will do the same thing
from your scripts but doing it from Apache is always the cleanest
and fastest way of doing that.

http://www.maxmind.com/app/api

 

[Infrenion]

hey Tailzehhhh, thanks for the link. May help us someday...

 

[Infrenion]

AMZ, have you tried that?


Lea!

 

[amz]

AMZ, have you tried that?

Yes, I've set that up on hundreds of servers.

Piece of cake to install! :classic2:

 

[redboyke]

how about check user ip if dns ends with .cn => ban
if unable to resolve => ban

 

[Darknight]

how about check user ip if dns ends with .cn => ban
if unable to resolve => ban

:lol: Thats not a very good idea! :lol: :lol: :lol: :lol:

 

[AvailNetworks]

I would like to ban china too
No idea why just bored...

and this is?

 

[fireshark]

Yeah, and half the people in the world don't resolve. Check your awstats or something -- many will say unknown, or just an IP. ISP's sometimes dont feel like resolving all their IPs.

 

[amz]

Yeah, and half the people in the world don't resolve. Check your awstats or something -- many will say unknown, or just an IP. ISP's sometimes dont feel like resolving all their IPs.

When you say "resolve" the way you put it, you are actually referring
to IPs having reverse DNS resolution to hostnames.

However, it is not necessary to obtain the reverse hostname in order
to determine the location of an IP address unless you are doing something
stupid such as "blocking .CN" like one user suggested.

Actually every IP on the planet will resolve to location with GeoIP
unless the user is on a Satellite connection but even then you can
still narrow things down pretty good.

Incidentally, if a server has GeoIP installed, AwStats can be configured to
use that for the Country identification and all your "Unknowns" in your
AwStats will suddenly be identified to their source location!

 

[AMC]

sounds like a neat peice of software, is that how you implement your system of not accepting ips from countries at different times ( i think you do anyway)
??

 

[zcoder]

I have ben using it to block china for a long time. and afew other countrys
I won't name.

Works fine for me.

Zcoder....

 

[Decker]

Re AMZ above for info - and zcoder, what are you talking about?

 

[amz]

Re AMZ above for info - and zcoder, what are you talking about?

Decker, just look at the first page of this thread ....

The software we are talking about is GeoIP from Maxmind

Basically in a nutshell, you have a compressed database on your server
that has the country and / or city locations of every IP address on
the internet and new updates are released each month that can be
easily downloaded by cron job.

Then you use either the Apache module or language plugins to enable
your server to make use of the database.

The Apache module is the coolest way to do it because you automatically
get 2 new server variables with every connection that give you the
country code and country name of every visitor connection!

It's a piece of cake to blacklist (or even whitelist) whole countries!

Using this technology also allows you to deliver different content
automatically based on the country of the visitor which is another
really cool thing you can do with GeoIP!

I pretty much consider GeoIP a "must install" item on all servers! :wave: