Results 1 to 7 of 7
  1. #1

    How to null route China?

    I use geoip so that if ($country="CN") { die(); }

    This works on my site. But for some reason I still get the occasional IP's through.

    I looked at my Lighttpd server-status and I have 600 connections from 3 different IPs that come from China.

    I typically use ./route add -host 222.221.81.3 reject as the way to block them, but it changes from time to time. The Chinese are using 90mbps of bandwidth and I want it to stop as they must be directly hotlinking my content.

    How to null route large blocks from China? Please note I want to keep Hong Kong, Macau and Taiwan.

  2. #2
    Join Date
    Dec 2003
    Location
    New Zealand
    Posts
    1,265
    mod_evasive will help with the hotlinking/high concurrent connections.

    You can find china IP range lists via google, you will always get the occasional one that slips through. Not to mention the ones that use a proxy.

  3. #3
    Quote Originally Posted by LoganNZ View Post
    mod_evasive will help with the hotlinking/high concurrent connections.

    You can find china IP range lists via google, you will always get the occasional one that slips through. Not to mention the ones that use a proxy.

    Mod_evasive is for 1.5.0, and I use 1.4.18. So I can't do this method.

    How to add the IP range via the shell? I can only do it for 1 IP at a time.

    Thanks.

  4. #4
    you can try csf also

  5. #5
    Quote Originally Posted by whitehorn View Post
    you can try csf also
    what's that?

  6. #6
    Join Date
    Oct 2004
    Location
    Kerala, India
    Posts
    4,771
    It is a firewall program. You can see details at http://configserver.com/cp/csf.html
    David | www.cliffsupport.com
    Affordable Server Management Solutions sales AT cliffsupport DOT com
    CliffWebManager | Access WHM from iPhone and Android

  7. #7
    Join Date
    Dec 2003
    Location
    New Zealand
    Posts
    1,265
    Quote Originally Posted by Gigaron View Post
    what's that?

    Check out www.configserver.com

    They offer a free, easy to use and easy to install web GUI to control many aspects/configs;

    Firewall Management
    User process security (LFD)

    ConfigServer.com also offers some other packages which can aid a lot in managing the basic security points of your linux-cpanel box.

    Good luck

    Best Regards,
    Logan

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •