On Thu, Nov 17, 2005 at 12:46:03PM +1100, Phill wrote: > Is there any way of finding out the range of ip addresses used in > Australia. My web server is frequently being attacked by [EMAIL PROTECTED]@ in > other countries. I want to configure my hosts.allow to accept australian > ip addresses only
The best way to secure your machine is to restrict connections to only
accept from 127.0.0.0/8. I did that and it restricted the number of attacks
I received by heaps.
Seriously though, how do you define "Australian IP addresses"? Addresses
assigned to physical hosts currently located in Australia? Machines
administered by Australian citizens? Addresses assigned, in the first
(or final) instance, to Australian legal entities?
The problem is that addresses move around, and can be sub-delegated and
redelegated all around the place. There are databases that try to keep a
track of some sense of "where" an IP address exists in meatspace, but
they're limited (at best).
My suggestion: don't bother trying to limit to some arbitrary ideal of
"where" an IP address is. Block selectively based on actual activity. Make
sure your machines are secure. And don't stress about it.
- Matt
--
Windows is too dangerous to be left to Windows admins.
-- James Riden, ASR
signature.asc
Description: Digital signature
-- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
