[Fwd: Re: Blocking Netranges Based on IP-to-Country CSV]
Probably needed to end up on the list...
Signature · 3 lines
Aleksandar Milivojevic <[email protected]> Pollard Banknote Limited Systems Administrator 1499 Buffalo Place Tel: (204) 474-2323 ext 276 Winnipeg, MB R3T 1L7
Quoted 4 lines · Gary & Mic McFall
Due to a number of issues, my organization is reviewing the ability to block certain country domains at the firewall. To be proactive, we want to automate that process via iptables & the CSV available at
<http://ip-to-country.webhosting.info>.
I currently work on a match geoip based on the maxmind database. You can observe my development state to:
http://codepoet.cookinglinux.net/cgi-bin/blosxom.cgi
and my current source code at:
http://www.cookinglinux.org/projects/netfilter-iptables/geoip_alpha-0.3/
Anyway I really dont know if my concept is ok. Using netlink in a match. I was wait to have a usable code to post.
If you plan to use my source code, please let me know, thanks.
--
Nicolas Bouliane
[email protected]