To be more specific I have a request from a client to block China's IP range. I know how to do this. I would use the IPs from https://www.countryipblocks.net/e_country_data/CN_netmask.txt and make a ACL. Well if you take a look at that there are 3,412 networks I would have to block.
What I'm really asking is there a way around making a super large ACL? If it was contiguous IP space I could just supernet but that is not the case.
Our ISP forced us to use their router that doesn't have any option to block certain URL/IP like our 3Com OfficeConnect router has.
Is there any other easy way to implement this without an intelligent router (we are also using a D-Link 1016 switch). Or shall we buy a more recent 3Com router?
Thanks.
I've been using, happily, opendns to block facebook on my network. Then I started thinking about tricks to circumvent this block and, of course, I've read here on serverfault how to block the facebook ip address. But if someone uses tor or freegate?
What can I do?
We have private forums running vBulletin, and we've gotten complaints from a customer that has trouble accessing them when he opens a lot of tabs. The last time he called, it was determined that our host had automatically blocked his ip address. After opening a support ticket with the host, they unblocked it, and they said it had been automatically blocked for too many connections (I assume concurrent connections). They said there were 546 connections.
The customer is running IE8 and claims that after around 8-12 tabs, the rest "time out" - every time. And, of course, no other website has this problem.
UPDATE: It turns out that Chrome (or Firefox, but I think it was Chrome) has the same issue. But Opera seems to be fine (I'm figuring because of its aggressive caching).
With no direct access to the computers on either end, how can I hope to resolve this?
I'm having an issue with a certain individual who keeps scraping my site in an aggressive manner; wasting bandwidth and CPU resources. I've already implemented a system which tails my web server access logs, adds each new IP to a database, keeps track of the number of requests made from that IP, and then, if the same IP goes over a certain threshold of requests within a certain time period, it's blocked via iptables. It may sound elaborate, but as far as I know, there exists no pre-made solution designed to limit a certain IP to a certain amount of bandwidth/requests.
This works fine for most crawlers, but an extremely persistent individual is getting a new IP from his/her ISP pool each time they're blocked. I would like to block the ISP entirely, but don't know how to go about it.
Doing a whois on a few sample IPs, I can see that they all share the same "netname", "mnt-by", and "origin/AS". Is there a way I can query the ARIN/RIPE database for all subnets using the same mnt-by/AS/netname? If not, how else could I go about getting every IP belonging to this ISP?
Thanks.