Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

as far as i know, most of the time ISPs change the IP address-URL association in their DNS servers, so the URL is redirected to a page which displays the user a "this site is blocked" page. if an ISP really wants to stop the access to many hosts (tens of thousands), is it feasible for the ISP to start blocking their IP adresses? as i reckon, the ISP must filter out every packet by reading the header—which would be a very costly operation.

share|improve this question

migrated from May 27 '11 at 19:08

This question came from our site for professional and enthusiast programmers.

up vote 8 down vote accepted

It's trivial to filter by destination IP address. Routers already switch on header destination IP; you just have to set up a null route for the IP in question. Indeed, this is done on a regular basis for DDoS mitigation.

share|improve this answer

It is somewhat unclear if you're referring to an ISP blocking access to a given server "from the world" or blocking access "to parts of the world" from their own customers.

The two may look similar, but they're quite different and good designs for one does not translate as good designs for the other.

For the "make sure the world cannot see a given server", it would, as always, depend on the exact architecture of the web-hosting. These days, most providers will host sites not needing HTTPS on a shared server, using HTTP header information to differentiate different sites (virtual server hosting).

The "easy" way of blocking this is to simply change the server setup on the web server to point the request at a static site, saying "blocked" or similar, In conjuction with that, I'd probably also post a DNS change, redirecting the query to a server dedicated at saying just that.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.