Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 8 replies
  • Subscribers 2 subscribers
  • Views 5329 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Large Ban list aka torrent, anon proxy,country etc

PenTest
There are a few locations on the net that list IP addresses that most people dont want anything to do with. A few that come to mind are the Azureus ban list plugin ,the anonymous web proxy ban list, country block bans (e.g. block Asia from your Europe ftp site).

As it stands its not practical to use these lists with Astaro as no one want to define 10-20000 objects.

Any thoughts on how intresting a feature like this would be? this


This thread was automatically locked due to age.
Parents
  • 0
    Current APNIC blocks:
    1/8
    14/8
    27/8
    36/8
    42/7
    49/8
    58/7
    60/7
    101/8
    110/7
    112/5
    120/6
    124/7
    126/8
    133/8
    150/8
    153/8
    163/8
    171/8
    175/8
    180/8
    182/7
    202/7
    210/7
    218/7
    220/6

    aggregated from http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.xml

    Note I'm not currently using Astaro's geoIP blocking due to the following limitations:
    1. can't choose by protocol (e.g. block mail but allow web traffic)
    2. can't allow outgoing but block incoming
    3. can't whitelist or override; e.g. can't allow a user/network in S. Africa while blocking the rest of S. Africa

    Barry
Reply
  • 0
    Current APNIC blocks:
    1/8
    14/8
    27/8
    36/8
    42/7
    49/8
    58/7
    60/7
    101/8
    110/7
    112/5
    120/6
    124/7
    126/8
    133/8
    150/8
    153/8
    163/8
    171/8
    175/8
    180/8
    182/7
    202/7
    210/7
    218/7
    220/6

    aggregated from http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.xml

    Note I'm not currently using Astaro's geoIP blocking due to the following limitations:
    1. can't choose by protocol (e.g. block mail but allow web traffic)
    2. can't allow outgoing but block incoming
    3. can't whitelist or override; e.g. can't allow a user/network in S. Africa while blocking the rest of S. Africa

    Barry
Children
No Data