Tag Info

Hot answers tagged

20

Maxmind is a good service, though occasionally there can be errors, since we're now in the time period where IPv4 blocks are scarce, and are being traded and resold on a gray market. If you do find an actual error you can report it to them, though this doesn't appear to be an error. This is basically how I confirm the location of an IP address: First, I'll ...


11

If you can safely limit the supported clients of your service to systems supporting Server Name Indication, having only one IP address should be sufficient. See this article for a list of supported clients.


5

That's an IPv6 address. You can have him Google "what is my ip" (no quotes) and tell you what it reports and see if it gives a normal IPv4 address like you're expecting. Another site he can visit to get it is http://whatismyip.akamai.com


2

It's not just American users, it can be users from any country. And there are several reasons it can happen. Users traveling abroad and logging on from there would get reported as being users from that country. international companies often have IP blocks from one country only and assign those addresses to all their offices. same for ISPs operating in ...


2

ColdFusion is a platform/language. It is not in and of itself a web server, application layer protocol or network protocol. ColdFusion based websites run on whatever TCP port the website itself is running on, typically ports 80 or 443. HTTP/HTTPS operate at the application layer over TCP, not UDP.


1

Amazon's CloudFront CDN lets you serve dynamic content, and I'd recommend going that route because just because you have a presence in a particular country, doesn't mean you have a great network route to all the users there, and a good CDN tries to ensure that's the case. See http://aws.amazon.com/cloudfront/dynamic-content/ if you want to learn more about ...


1

That means that the 192.168.1.1 address is associated with a 240.0.0.0 mask. You have to think binary to understand that. In binary your IP address would be: 11000000.10101000.00000001.00000001 In the same way /4 represent the number of "1" bits in the mask. So here the mask is 11110000.00000000.00000000.00000000 (which is 240.0.0.0 in decimal) /8 would ...


1

The attacker could then just start attacking the other IP as well if they weren't already doing so. You might block some unsophisticated attacks, but not anyone who's even moderately determined. If your goal is to prevent DoS and not DDoS, you can look in to using mod_qos or iptables to limit total concurrent connections from a single IP. You can also ...


1

For specifying IP per client: You have a specific procedure "client config dir" for tying a key to a specific IP number. If you create a subdir "ccd" of the openvpn config directory, you can then specify that key/ip mapping files will be found there. In your openvpn.conf (or .ovpn on windows) : client-config-dir ccd ccd-exclusive If you have a client with ...


1

Views and RPZ allow you to define static responses based on characteristics of the packet source/destination (views), query itself, or upstream authoritative server (RPZ). The operative word here is static. The packet headers and queries change, but the replies are always pre-defined and static. What you're looking for is a form of on the fly response ...



Only top voted, non community-wiki answers of a minimum length are eligible