http://danielmiessler.com/blog/discussion-wheres-the-best-place-for-country-blocks grep understanding Tue, 15 May 2012 12:09:13 +0000 hourly 1 http://wordpress.org/?v=3.3.2 http://danielmiessler.com/blog/discussion-wheres-the-best-place-for-country-blocks/comment-page-1#comment-242333 tv Sat, 13 Jun 2009 09:33:03 +0000 http://dmiessler.com/?p=5799#comment-242333 <p>I would recommend going straight to the RIRs.<br><br>No chance for mistakes and tasty summarization for your config pleasures.</p> I would recommend going straight to the RIRs.

No chance for mistakes and tasty summarization for your config pleasures.

]]> http://danielmiessler.com/blog/discussion-wheres-the-best-place-for-country-blocks/comment-page-1#comment-242332 CSiedsma Sat, 13 Jun 2009 09:05:05 +0000 http://dmiessler.com/?p=5799#comment-242332 <p>If you want to blacklist entire countries a good place to identify the IPs you need to block can be found at :<br><br>China<br><a href="http://www.infosyssec.com/cgi-bin/iptocountry.cgi/?target=china" rel="nofollow">http://www.infosyssec.com/cgi-bin/iptocountry.c...</a><br><br>Russia<br><a href="http://www.infosyssec.com/cgi-bin/iptocountry.cgi/?target=russianfederation" rel="nofollow">http://www.infosyssec.com/cgi-bin/iptocountry.c...</a><br><br>North Korea<br><a href="http://www.infosyssec.com/cgi-bin/iptocountry.cgi/?target=republicofkorea" rel="nofollow">http://www.infosyssec.com/cgi-bin/iptocountry.c...</a><br><br>Brazil<br><a href="http://www.infosyssec.com/cgi-bin/iptocountry.cgi/?target=brazil" rel="nofollow">http://www.infosyssec.com/cgi-bin/iptocountry.c...</a><br><br>Similar list are there also for all other countries. Be sure to block out Spain and the Netherlands ( because nothing comes out of those countries except e-mail harvesters for spamming ). And definitely block out Nigeria ( yes 419ers actually do operate from Nigeria ).</p> If you want to blacklist entire countries a good place to identify the IPs you need to block can be found at :

China
http://www.infosyssec.com/cgi-bin/iptocountry.c…

Russia
http://www.infosyssec.com/cgi-bin/iptocountry.c…

North Korea
http://www.infosyssec.com/cgi-bin/iptocountry.c…

Brazil
http://www.infosyssec.com/cgi-bin/iptocountry.c…

Similar list are there also for all other countries. Be sure to block out Spain and the Netherlands ( because nothing comes out of those countries except e-mail harvesters for spamming ). And definitely block out Nigeria ( yes 419ers actually do operate from Nigeria ).

]]> http://danielmiessler.com/blog/discussion-wheres-the-best-place-for-country-blocks/comment-page-1#comment-242330 tv Sat, 13 Jun 2009 04:32:31 +0000 http://dmiessler.com/?p=5799#comment-242330 <p>i prefer an intelligent whitelist obviously allowing for business requirements. it should be enforced on the appropriate device(s) that have the horsepower to house them and where they are relatively easy to admin.</p> i prefer an intelligent whitelist obviously allowing for business requirements. it should be enforced on the appropriate device(s) that have the horsepower to house them and where they are relatively easy to admin.

]]>