The IP to Country Database

I dont know how to do exactly what you want and taking a look at freshmeat.net might be a good idea. I had a tentative look and could not find something specific. You might me able to do something with a project that monitors iptables logs and is able to call another process. Another idea might be to use a transparent proxy that stores its acls in a database. I think squid 2.5 can do this for http acls but not sure about ftp.

However, personally I dont think that it would be a good idea to dynamically and transparently block ip addresses and be in a situation where you just update the ip2country db. I think that there would just be too much to go wrong and really would put alot of reliance on the ip ranges being correct. There would of course be other issues such as possible DOS attacks (though technically addresses would be blocked anyway) and that your iptables will exponentially grow, so consuming more and more kernel memory.

A couple of ideas:
i) Ascertain what ip ranges you want to accept and deny everything else (which is probably the last rule anyhow), adding these ranges to your firewall script. This could probably be scripted and I think you could do this directly from the csv file.
ii) As I am sure you are aware ftp daemons have their own acls, maybe here would be a place to do something like above and leave it out of iptables completely.

Cheers, and if you find something or implement something I would be very interested to know how you went about it ;)

I run a dating site, just for specific parts of the U.S. and want to block out all other countries. Could I not just obtain the dot block range for the U.S. and add that to my .htaccess file?

If so, where would I get the dot range for the U.S.

Thanks
Dennis

Might someone help this newbie navigate?

I haven't found yet how to reformat the IP list to that which will work with Peer Guardian IP blocking software. Is there something to help me do this?

Thanks!

The best way to remove or limit the service to a specific country, is by using the ip-to-country in pretty much the traditional way. And then using a comparison with the resulting country.

By traditional I mean: Using a server side script (like PHP, etc.). And then querying a database (like MySQL, etc.)

You could then, within that page, compare the CountryCode2 with a list of allowed or disallowed countries. This could be an array, or whatever is easier for you. That comparison will then filter the output as desired.

The advantage of this method is that you can quickly update the valid ranges by simply updating the database. You won't have to manually go over a list of rules. The disadvantage is that it requires server-side scripting, which sometimes is not available.

If you want to hardcode the ranges into your application, the following website will provide the list of ranges per country:

http://mcafee.servegame.com/download/country.php

Summer, coming soon! mature babe ass This is pretty mature babe ass. fetish trio My fetish is fetish trio. teens orgy I like wild teens orgy in the bedroom. teens egyption Few teens egyption are not hot. gay cum sperm Gay cum sperm, isn't it? big boob teen There some big boob teen in the backyard. asian nylon hardcore They want asian nylon hardcore today. anal cream hair Look! Anal cream hair! anal destroyed Is it anal destroyed? Don't no. asian up skirt I like asian up skirt very much. gay group cum Some gay group cum now. mature big busty There are mature big busty here. lesbian cunt love Is lesbian cunt love attractive? gay outdoor sex It is gay outdoor sex. big boobies Sge has smooth big boobies. anal ffm mature Sarah have anal ffm mature. We await.