Blocking "bad" countries in apache and iptables

SpaceshipSpaceship
Watch

CrackFeed.Com

Account Closed
Impact
13
0
•••
The views expressed on this page by users and staff are their own, not those of NamePros.
AfternicAfternic
All good and well but the IP ranges can change. What is an IP range assigned to Russia this week may in future be assigned to a company in the US or any other country.

Also placing so many IP's in iptables can cripple the server a bit. If the list gets too large every time a connection is made the server has to compare the IP with the iptables database. The larger the database the longer it takes and the more resources consumed.
 
0
•••
Yes one has to be very careful about using ip blocking to make sure none of the ip addresses are downstream of the server. As far as these ip ranges changing, this is very very very rare, from what I understand... which is also why I monitor and update my database. I wouldn't recommend using the ip tables option as that it keeps them from emailing you also.
 
Last edited:
0
•••
Appraise.net

We're social

Escrow.com
Spaceship
Rexus Domain
CryptoExchange.com
Domain Recover
CatchDoms
NameMaxi - Your Domain Has Buyers
DomDB
NameFit
  • The sidebar remains visible by scrolling at a speed relative to the page’s height.
Back