RE: Country to IP range list

From: Andres Martinez (artiman_at_artiman.net)
Date: 01/07/05

  • Next message: Andrew Shore: "RE: WinXP Login Logs"
    To: Bill Gallagher <bill.gallagher@augharue.com>, Dennis Cox <dcox@tippingpoint.com>, Kevin Barzdaitis <kevin@bidz.com>, security-basics@lists.securityfocus.com
    Date: Fri,  7 Jan 2005 16:04:41 -0500
    
    

    Instead of countries I would recommend to work based on continents if is posssible, it would be more easier.

    Andres

    ----- Original Message -----
    From: Bill Gallagher <bill.gallagher@augharue.com>
    To: Dennis Cox <dcox@tippingpoint.com>, Kevin Barzdaitis <kevin@bidz.com>, security-basics@lists.securityfocus.com
    Sent: Fri, 7 Jan 2005 15:31:41 -0500
    Subject: RE: Country to IP range list

    > IMO almost futile.
    >
    > I am in Ireland, but my external IP shows as Germany. Some sites have
    > implemented a lookup such as you are discussing and if forces some web sites
    > into German and some to be unavailable.
    >
    > So you will have problems of legitimate customers being refused access and
    > users who should be excluded being permitted.
    >
    > Many users of satellite ISP services will have exactly this problem. IP
    > addresses *cannot* be used reliably to determine anything except the ISP.
    >
    > Just my 2c worth.
    >
    > Bill
    >
    > -----Original Message-----
    > From: Dennis Cox [mailto:dcox@tippingpoint.com]
    > Sent: Friday, January 07, 2005 6:50 PM
    > To: Kevin Barzdaitis; security-basics@lists.securityfocus.com
    > Subject: RE: Country to IP range list
    >
    >
    > Kevin,
    >
    > Why not put all the IP to Country information in a database. Then
    > search based on Country to find the IP's associated.
    >
    > Dennis
    >
    > -----Original Message-----
    > From: Kevin Barzdaitis [mailto:kevin@bidz.com]
    > Sent: Thursday, January 06, 2005 9:02 PM
    > To: security-basics@lists.securityfocus.com
    > Subject: Country to IP range list
    >
    >
    > Hello, all!
    >
    > I have a situation here where specific services shall be offered ONLY to
    > specific countries. I think of blocking all IP addresses (on the
    > firewall)
    > for specific servers and allowing only IP ranges by Country. I was
    > wondering
    > if there exists publicly available list of "Country to IP ranges". I was
    > only able to find "IP to Country" mappings, but i need to check every
    > address specifically.
    >
    > Thanks!
    >
    >


  • Next message: Andrew Shore: "RE: WinXP Login Logs"