Blocking "bad" countries in apache and iptables

[CrackFeed.Com]

I have begun storing the ip ranges of bad countries to be blocked for spam, hacking, worms and software piracy. These are the worst of the worst. Russia, Romainia, Armania, Nigeria, and others.

Block bad countries ip ranges htaccess, apache and iptables. | PHP Tips and Linux Tips

This list is intended for businesses that focus on the North America and Europe.

If you like, please DIGG the article.

 

[Peter]

All good and well but the IP ranges can change. What is an IP range assigned to Russia this week may in future be assigned to a company in the US or any other country.

Also placing so many IP's in iptables can cripple the server a bit. If the list gets too large every time a connection is made the server has to compare the IP with the iptables database. The larger the database the longer it takes and the more resources consumed.

 

[CrackFeed.Com]

Yes one has to be very careful about using ip blocking to make sure none of the ip addresses are downstream of the server. As far as these ip ranges changing, this is very very very rare, from what I understand... which is also why I monitor and update my database. I wouldn't recommend using the ip tables option as that it keeps them from emailing you also.