Tag Info

Hot answers tagged

2

You'd have to look up ip ranges per country. Google can help you there. These are a lot though, and making individual rules may make your firewall slow. Also, I don't know how to do that in a Cisco SG200, especially when you have one of those webinterfaces that only allow you to enter 10 rules, but using iptables on Linux, it's straightforward enough to ...


2

Look at the "Caveats & Legal Disclaimers" section on http://cyber-defense.sans.org/blog/2011/10/25/windows-firewall-script-block-addresses-network-ranges and then look at how their Import-Firewall-Blocklist.ps1 script works.


1

To define a source IP for a rule, you use -s. In this example, you want to add -s 1.2.3.4 to your line. iptables -A OUTPUT -p udp -d 8.8.8.8 -s 1.2.3.4 --dport 53 -j ACCEPT iptables -A OUTPUT -p udp -d 8.8.8.8 --dport 53 -j DROP


1

Search for GEOIP. you will have ip ranges by provider's countries (key point is here. it's providers country on paper.) Geographic division is actually meanless when we are talking about web. Anyone can have any IP address from anywhere. Also your geoip database must be updated regularly. More over your block list will be a long list. consider that rules ...



Only top voted, non community-wiki answers of a minimum length are eligible