Block a host

Reply

•
•
Join Date: Sep 2009
Posts: 2
Reputation: bosola is an unknown quantity at this point 
Solved Threads: 0
bosola bosola is offline Offline
Newbie Poster

Block a host

 
0
  #1
Sep 4th, 2009
Hi,
I need some informations about how a country like ...Italy, UK,.. can block the access to a site of its country(under .it domain) to a the foreign host.
for example: The state "Italy" have a internet game that is legal for the people that lives in Italy, but it doesn't want that foreign people the lives in others country can access to this game.

How it can do this? (I need specific technique not political consideration). I have thinked about the dual thing, the case in which a country wants to block the access to a foreign site for its citizens...The state can impose, obligue the ISP to not respond to the Dns query to the specip game site...

Can you help me? Have you got a link that can help me?

Thanks.
Reply With Quote Quick reply to this message  
•
•
Join Date: Feb 2009
Posts: 3,338
Reputation: sknake has much to be proud of sknake has much to be proud of sknake has much to be proud of sknake has much to be proud of sknake has much to be proud of sknake has much to be proud of sknake has much to be proud of sknake has much to be proud of sknake has much to be proud of sknake has much to be proud of 
Solved Threads: 602
Sponsor
sknake's Avatar
sknake sknake is online now Online
.NET Enthusiast

Re: Block a host

 
0
  #2
Sep 4th, 2009
You should largely disregard DNS for identifying the original of an IP address. DNS names can be set up anywhere and there is significant overhead with performing a DNS resolution on inbound IPs which will eventually plug up your server.

What you should do is find a database of IP blocks located to each country and filter the entire blocks.I suppose you could contact ISPs to do the filtering for you but you will not get in touch with every ISP and over time the rules will be 'lost' or new ISPs will start up in the country. Here is what I do to filter IP addresses:

bash Syntax (Toggle Plain Text) 
  1. sk:~/fw# grep ^block\. ips.block
  2. block.se:217.210.0.0/255.255.0.0
  3. block.se:217.215.0.0/255.255.0.0
  4. block.se:217.211.0.0/255.255.0.0
  5. block.nz:203.114.0.0/255.255.0.0
  6. block.pl:83.31.0.0/255.255.0.0
  7. block.jp:210.251.0.0/255.255.0.0
  8. block.jp:60.36.0.0/255.255.0.0
  9. block:64.231.106.0/255.255.255.0
  10. block.tr:81.215.0.0/255.255.0.0
  11. block.mx:200.76.0.0/255.255.0.0
  12. block.peri:200.106.0.0/255.255.0.0
  13. block.ch:80.218.0.0/255.255.0.0
  14. block.it:212.171.0.0/255.255.0.0
  15. block.de:217.85.0.0/255.255.0.0

The ip2nation database should give you a comprehensive list of IP blocks belonging to each country.
Scott Knake
Custom Software Development
Apex Software, Inc.
Reply With Quote Quick reply to this message  
•
•
Join Date: Sep 2009
Posts: 2
Reputation: bosola is an unknown quantity at this point 
Solved Threads: 0
bosola bosola is offline Offline
Newbie Poster

Re: Block a host

 
0
  #3
Sep 4th, 2009
•
•
•
•
Originally Posted by sknake View Post
You should largely disregard DNS for identifying the original of an IP address. DNS names can be set up anywhere and there is significant overhead with performing a DNS resolution on inbound IPs which will eventually plug up your server.

What you should do is find a database of IP blocks located to each country and filter the entire blocks.I suppose you could contact ISPs to do the filtering for you but you will not get in touch with every ISP and over time the rules will be 'lost' or new ISPs will start up in the country. Here is what I do to filter IP addresses:

bash Syntax (Toggle Plain Text) 
  1. sk:~/fw# grep ^block\. ips.block
  2. block.se:217.210.0.0/255.255.0.0
  3. block.se:217.215.0.0/255.255.0.0
  4. block.se:217.211.0.0/255.255.0.0
  5. block.nz:203.114.0.0/255.255.0.0
  6. block.pl:83.31.0.0/255.255.0.0
  7. block.jp:210.251.0.0/255.255.0.0
  8. block.jp:60.36.0.0/255.255.0.0
  9. block:64.231.106.0/255.255.255.0
  10. block.tr:81.215.0.0/255.255.0.0
  11. block.mx:200.76.0.0/255.255.0.0
  12. block.peri:200.106.0.0/255.255.0.0
  13. block.ch:80.218.0.0/255.255.0.0
  14. block.it:212.171.0.0/255.255.0.0
  15. block.de:217.85.0.0/255.255.0.0

The ip2nation database should give you a comprehensive list of IP blocks belonging to each country.


1)If I have understood correctly, a governement should require/constrain the administrator of the "game site" or better the ISP that handles the servers and lodge the site:
" to set a list of IP adresses of the all countries that it doesn't want allow to access at the site and put a rule to deny the requests from the Ip in the black list" right? The ISP can do this adding a rule in to the .htacces file, right?

2) But, you have written "block.de:217.85.0.0/255.255.0.0" its means that you block all the german host, but how can you know all the IP of German host?

thanks
Reply With Quote Quick reply to this message  
•
•
Join Date: Feb 2009
Posts: 3,338
Reputation: sknake has much to be proud of sknake has much to be proud of sknake has much to be proud of sknake has much to be proud of sknake has much to be proud of sknake has much to be proud of sknake has much to be proud of sknake has much to be proud of sknake has much to be proud of sknake has much to be proud of 
Solved Threads: 602
Sponsor
sknake's Avatar
sknake sknake is online now Online
.NET Enthusiast

Re: Block a host

 
0
  #4
Sep 4th, 2009
1) The government shouldn't be in the middle of this unless its China/Iran and they're trying to censor internet access to promote their propoganda but that is another matter entirely.

2) No that does not block all german hosts, that is merely one subnet of .de IP ranges.

You should read my last post. I indicated there is a database called "ip2nation". You should get that database which lists IP ranges for each country, select the countries you want to block, and implement the firewall rules. This will depend on what type of edge device (router) you have.
Scott Knake
Custom Software Development
Apex Software, Inc.
Reply With Quote Quick reply to this message  
•
•
Join Date: Aug 2009
Posts: 53
Reputation: vincent2085 can only hope to improve 
Solved Threads: 4
vincent2085 vincent2085 is offline Offline
Junior Poster in Training

Re: Block a host

 
-1
  #5
Sep 12th, 2009
block.nz:203.114.0.0/255.255.0.0

using this format u can block
Link Building Packages
Laser Teeth Whitening Products
Acne Home Treatment
Reply With Quote Quick reply to this message  
Reply

Quick Reply to Thread
This thread is more than three months old.
Perhaps start a new thread instead?
•
•
•
•
•
•
•
•
Message:
•
•
•
•



Similar Threads
Other Threads in the Network Security Forum
Thread Tools Search this Thread



Tag cloud for Network Security
adobe advice antivirus apple banking blackmail botnet browser business cellphone china confidentiality crime cybercrime cyberwarfare daniweb data database dataloss dataprotection development email emailretention encryption exploit facebook fail firefox forensic fraud google government hack hacker hacking hardware ibm idtheft information infosec internet iphone kaspersky kernel koobface law linux malware mcafee mckinnon microsoft military mobile music nasa nationalsecurity network networks news obama olympics password passwords pentagon phishing php politics privacy realplayer report research satnav scam school search security socialnetworking software softwaredevelopment spam survey symantec symbian terrorism terrorist theft trends trojan trojans twitter uk usb virus vulnerability warning web wireless worm yahoo youtube
About Us | Contact Us | Advertise | DaniWeb | Acceptable Use Policy | RSS Feed

©2003 - 2009 DaniWeb® LLC