On Fri, 06 Jan 2012 18:05:14 +0000 [email protected] wrote:
> On Fri, 2012-01-06 at 12:34 +0100, Timothy Murphy wrote: > > > > I'd be very interested to know if Tom Eastep approves or disapproves > > of this script ... > > Personally, I disapprove of the whole concept of country blocking but > that's just my personal opinion. If I were to implement country > blocking, I would use an ipset rather than a long chain of blacklist > rules. > > -Tom This question seems to come up frequently. Here is a set of example scripts I made that demonstrate the use of ipset for such blacklisting. The second example pertains to blocking entire countries, which is a practice of questionable value but which seems to appeal to many. http://forums.gentoo.org/viewtopic-t-863121.html
signature.asc
Description: PGP signature
------------------------------------------------------------------------------ Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don't need a complex infrastructure or vast IT resources to deliver seamless, secure access to virtual desktops. With this all-in-one solution, easily deploy virtual desktops for less than the cost of PCs and save 60% on VDI infrastructure costs. Try it free! http://p.sf.net/sfu/Citrix-VDIinabox
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
