One possible advantage of the fact that IANA has depleted its pool of
/8's (class A) is that if you are only filtering at that level the data
is static now. It should never change again for IPV4.
John
On 2/13/2011 11:54 PM, Steve Edwards wrote:
On Mon, 14 Feb 2011, Bruce B wrote:
What sources do you use to limit SIP connecting customers to specific
countries by IP (e.g. allowing USA and not China). It would help me a
lot of you can note the sources you trust that are complete and up to
date.
I compiled this list a few (6?) months ago by typing class A address
blocks into Arin.net's 'whois' web page and noting which Regional
Internet Registry it was allocated to.
http://www.voip-info.org/wiki/view/allocated-class-a-ip-address-blocks
After plonking this into a couple of production hosts, attacks of all
ports dropped dramatically.
I note there have been changes since then (128.0.0.0 was assigned to
RIPE back in November), so if anybody wants to 'refresh' and post
changes, please do.
--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
http://www.asterisk.org/hello
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users