Groups > comp.os.linux.networking > #3463

Re: Blocking top level domains

From	Joe Beanfish <joebeanfish@nospam.duh>
Newsgroups	comp.os.linux.networking
Subject	Re: Blocking top level domains
Date	2015-08-09 01:33 +0000
Organization	A noiseless patient Spider
Message-ID	<mq6am0$4ra$1@dont-email.me> (permalink)
References	<mq38o7$4p6$1@news.albasani.net>

Show all headers | View raw

On Fri, 07 Aug 2015 21:42:31 +0000, James H. Markowitz wrote:

> I want to block all packets coming to my systems from IP addresses in a
> given domain - say, cn. Can this be done with iptables? If not, what is
> the tool for the job?

Not by DNS. But you can block coursely by region/country.
Get major block ownerships from
http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.txt

I use that list to block ssh from most non-US regions. Dramatically
reduces brute force attacks.

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Blocking top level domains "James H. Markowitz" <noone@nowhere.net> - 2015-08-07 21:42 +0000
  Re: Blocking top level domains Vilmos Soti <vilmos@soti.ca> - 2015-08-07 21:02 -0700
    Re: Blocking top level domains Ian Zimmerman <itz@buug.org> - 2015-08-08 08:09 -0700
      Re: Blocking top level domains "James H. Markowitz" <noone@nowhere.net> - 2015-08-08 21:25 +0000
        Re: Blocking top level domains Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2015-08-08 23:31 +0200
        Re: Blocking top level domains William Unruh <unruh@invalid.ca> - 2015-08-09 13:51 +0000
          Re: Blocking top level domains "James H. Markowitz" <noone@nowhere.net> - 2015-08-09 15:57 +0000
            Re: Blocking top level domains William Unruh <unruh@invalid.ca> - 2015-08-09 16:38 +0000
              Re: Blocking top level domains Clark Smith <noaddress@nowhere.net> - 2015-08-09 23:30 +0000
      Re: Blocking top level domains Vilmos Soti <vilmos@soti.ca> - 2015-08-08 22:33 -0700
  Re: Blocking top level domains Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2015-08-08 10:28 +0200
    Re: Blocking top level domains Jorgen Grahn <grahn+nntp@snipabacken.se> - 2015-08-08 12:48 +0000
    Re: Blocking top level domains Lew Pitcher <lew.pitcher@digitalfreehold.ca> - 2015-08-08 10:42 -0400
      Re: Blocking top level domains Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2015-08-08 17:52 +0200
  Re: Blocking top level domains Marc Haber <mh+usenetspam1118@zugschl.us> - 2015-08-08 15:09 +0200
  Re: Blocking top level domains Joe Beanfish <joebeanfish@nospam.duh> - 2015-08-09 01:33 +0000

csiph-web