RE: Country to IP range list
From: Andres Martinez (artiman_at_artiman.net)
Date: 01/07/05
- Previous message: Jon Hart: "Re: ssh key problem"
- In reply to: Bill Gallagher: "RE: Country to IP range list"
- Next in thread: P. Schmiel: "Re: Country to IP range list"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: Bill Gallagher <bill.gallagher@augharue.com>, Dennis Cox <dcox@tippingpoint.com>, Kevin Barzdaitis <kevin@bidz.com>, security-basics@lists.securityfocus.com Date: Fri, 7 Jan 2005 16:04:41 -0500
Instead of countries I would recommend to work based on continents if is posssible, it would be more easier.
Andres
----- Original Message -----
From: Bill Gallagher <bill.gallagher@augharue.com>
To: Dennis Cox <dcox@tippingpoint.com>, Kevin Barzdaitis <kevin@bidz.com>, security-basics@lists.securityfocus.com
Sent: Fri, 7 Jan 2005 15:31:41 -0500
Subject: RE: Country to IP range list
> IMO almost futile.
>
> I am in Ireland, but my external IP shows as Germany. Some sites have
> implemented a lookup such as you are discussing and if forces some web sites
> into German and some to be unavailable.
>
> So you will have problems of legitimate customers being refused access and
> users who should be excluded being permitted.
>
> Many users of satellite ISP services will have exactly this problem. IP
> addresses *cannot* be used reliably to determine anything except the ISP.
>
> Just my 2c worth.
>
> Bill
>
> -----Original Message-----
> From: Dennis Cox [mailto:dcox@tippingpoint.com]
> Sent: Friday, January 07, 2005 6:50 PM
> To: Kevin Barzdaitis; security-basics@lists.securityfocus.com
> Subject: RE: Country to IP range list
>
>
> Kevin,
>
> Why not put all the IP to Country information in a database. Then
> search based on Country to find the IP's associated.
>
> Dennis
>
> -----Original Message-----
> From: Kevin Barzdaitis [mailto:kevin@bidz.com]
> Sent: Thursday, January 06, 2005 9:02 PM
> To: security-basics@lists.securityfocus.com
> Subject: Country to IP range list
>
>
> Hello, all!
>
> I have a situation here where specific services shall be offered ONLY to
> specific countries. I think of blocking all IP addresses (on the
> firewall)
> for specific servers and allowing only IP ranges by Country. I was
> wondering
> if there exists publicly available list of "Country to IP ranges". I was
> only able to find "IP to Country" mappings, but i need to check every
> address specifically.
>
> Thanks!
>
>
- Previous message: Jon Hart: "Re: ssh key problem"
- In reply to: Bill Gallagher: "RE: Country to IP range list"
- Next in thread: P. Schmiel: "Re: Country to IP range list"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|