Question about IPs

Portal Home > Knowledgebase > Articles Database > Question about IPs

Posted by emsjs1, 08-31-2009, 08:32 PM
I noticed that a lot of IPs from China is being used to attack or hack servers. I am receiving a lot of lfd notifications from chinese IPs. Is there a specific ip range for servers/internet in China? I just want to block access to my servers from all internet/servers/ips from China. Anyway I do not have and not expecting to have clients located in China.
Posted by MaximSupport, 08-31-2009, 08:46 PM
Dear emsjs1, First Solution You can use http://www.blockacountry.com and select China and export list and block these ip addresses using iptables or ipsec. Second Solution You can use POM by Netfilter and compile goip support in iptables and block specific country using iptables. FYI, http://www.eukhost.com/forums/f30/up...es-geoip-4279/ Best Regards. Last edited by MaximSupport; 08-31-2009 at 08:52 PM.
Posted by rootatmike, 08-31-2009, 09:15 PM
you can get the china IPs from the site http://www.blockacountry.com Thanks.
Posted by WHR-Abner, 09-01-2009, 01:15 AM
Further to MaximSupport, you can generate an Apache deny list and block the IP's using ACLs.
Posted by vectro, 09-01-2009, 04:41 PM
If you want to block China for the entire server I recommende csf. It is a full-featured security program for Linux and has a special feature for blocking countries. http://www.configserver.com/cp/csf.html Using blockacountry.com and MaxMind GeoIP (maxmind.com) only work at the web server level. They are OK if that is your goal. If you want to block a country for the entire server (web, ssh, ftp, everything else) then csf is recommended.
Posted by cndedi, 09-03-2009, 04:14 AM
Or you can get the list and import it into a hardware fireall for more performance.

Add to Favourites Print this Article