Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 10 replies
  • Subscribers 2 subscribers
  • Views 9296 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Best way for mass CIDR blocks.

Coder68
This question is for anyone, but I think it was Barry who mentioned this before.

I am blocking a huge number of CIDR address with Banish in IPCop. Someone, again I think Barry, said there was a better way to block all of these addresses.

Can someone please tell me what thay way is, and how to do it!?

I am blocking all of China, Russia, Brazil, and a dozen other countries.  Over a MILLION IP's! I would like to roll this over to the astaro.

If anyone wants the full CIDR list, just let me know. I keep it in Excel for easy export.  It is in Banish format but can be exported with just the CIDR's.

Thanks!


This thread was automatically locked due to age.
Parents
  • 0
    Current APNIC blocks:
    1/8
    14/8
    27/8
    36/8
    42/7
    49/8
    58/7
    60/7
    101/8
    110/7
    112/5
    120/6
    124/7
    126/8
    133/8
    150/8
    153/8
    163/8
    171/8
    175/8
    180/8
    182/7
    202/7
    210/7
    218/7
    220/6

    aggregated from IANA IPv4 Address Space Registry

    Note I'm not currently using Astaro's geoIP blocking due to the following limitations:
    1. can't choose by protocol (e.g. block mail but allow web traffic)
    2. can't allow outgoing but block incoming
    3. can't whitelist or override; e.g. can't allow a user/network in S. Africa while blocking the rest of S. Africa

    Barry
Reply
  • 0
    Current APNIC blocks:
    1/8
    14/8
    27/8
    36/8
    42/7
    49/8
    58/7
    60/7
    101/8
    110/7
    112/5
    120/6
    124/7
    126/8
    133/8
    150/8
    153/8
    163/8
    171/8
    175/8
    180/8
    182/7
    202/7
    210/7
    218/7
    220/6

    aggregated from IANA IPv4 Address Space Registry

    Note I'm not currently using Astaro's geoIP blocking due to the following limitations:
    1. can't choose by protocol (e.g. block mail but allow web traffic)
    2. can't allow outgoing but block incoming
    3. can't whitelist or override; e.g. can't allow a user/network in S. Africa while blocking the rest of S. Africa

    Barry
Children
No Data