PDA

Bekijk Volledige Versie : Re: Country by Country ISA Computer Sets



Richard Powell
18/01/08, 21:45
> In my professional life, I see frequent requests of this nature from
> customers in western/English-speaking countries. My immediate
> response is, "you *are* aware that Australia and New Zealand are
> part of APNIC, right?"

http://ftp.apnic.net/stats/apnic/delegated-apnic-latest
http://ftp.apnic.net/stats/ripe-ncc/delegated-ripencc-latest

I've used the above lists to block only certain countries of the APNIC
with some degree of success.

ie...
$codes = "CN,HK,TW"; // China, Hong Kong, Taiwan
OR
$codes = "RO"; // Romania

Then I only blocked the subnets for those countries in iptables.