Block by country

Apr 08, 2009 6 Replies

Rate this thread:

Walter Malde 17 years ago

I have a Cisco 871 router with IOS 12.4 installed. I'm using SDM 2.5 to do most of my configuration. I want to set up the firewall capability to block incoming connections to my website from anywhere other than the United States.

Does anyone know a quick, easy way to write the firewall rules for this so I don't have to have an over long list of rules?

Thanks

Vote

Artie Lange 17 years ago

formatting link

you would have to obtain IP address for each regional registry except for ARIN (American Registry for Internet Numbers)

You are talking about a very large number of IP address.

Vote

Artie Lange 17 years ago

formatting link

you would want to create ACL's for any entry for APNIC, RIPE, LACNIC

Vote

Walter Malde 17 years ago

I was hoping someone would know a faster way than that. I knew about all the lists you pointed out, I was just trying to limit the number of firewall rules I needed.

Artie Lange wrote:

Vote

Artie Lange 17 years ago

Nothing I am aware of, sorry.

Vote

Walter Malde 17 years ago

Thanks for your time.

Artie Lange wrote:

Vote

Alfred Nagl 17 years ago

Maybe a starting point - there exists a DNSBL (DNS blocklist) - whether a given IP address resides in a given country - see

formatting link

and try (24.113.37.76 is the IP of NNTP-Posting-Host)

dig 76.37.113.24.zz.countries.nerd.dk any

which returns:

;; ANSWER SECTION:

76.37.113.24.zz.countries.nerd.dk. 2100 IN TXT "us" 76.37.113.24.zz.countries.nerd.dk. 2100 IN A 127.0.3.72

Vote

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required