Blocking entire countries - TechRepublic
General discussion
August 29, 2002 at 03:57 AM
techstop

Blocking entire countries

by techstop . Updated 23 years, 10 months ago

If I wanted to block an entire country from being able to access my network, is there a way to do this?

That is, does anyone know if there are specific allocations of IP blocks which, if I blocked them, would effectively prevent all computers from a specific country from contacting me?

Specifically, I would like to be able to block all of Korea and/or all of Brazil, as two examples. I’m pretty sure you can catch all of Brazil (although you probably get most of South America with it) by blocking 200.0.0.0/8. But what about Korea?

It’s also important (and here Brazil is a bummer) to be able to block the country without blocking other countries, or at least huge chunks of other countries. For example, I don’t like blocking 200.0.0.0/8 because it catches other S.A. countries.

I’m tired of addresses that don’t resolve being used to attack my computers. And most seem to originate in those two countries when I finally track them down. I’m talking firewall blocking, btw, not just e-mail.

Thanks, in advance.

P.S. Points only given for actual solutions. If you make a suggestion, and after a few days of watching (which is all it should take, as often as this happens) it works, I will award points and close the question.

This discussion is locked

All Comments