Results 1 to 7 of 7
Thread: How to null route China?
-
03-16-2008, 02:43 AM #1Aspiring Evangelist
- Join Date
- Nov 2007
- Posts
- 359
How to null route China?
I use geoip so that if ($country="CN") { die(); }
This works on my site. But for some reason I still get the occasional IP's through.
I looked at my Lighttpd server-status and I have 600 connections from 3 different IPs that come from China.
I typically use ./route add -host 222.221.81.3 reject as the way to block them, but it changes from time to time. The Chinese are using 90mbps of bandwidth and I want it to stop as they must be directly hotlinking my content.
How to null route large blocks from China? Please note I want to keep Hong Kong, Macau and Taiwan.
-
03-16-2008, 02:47 AM #2Hosting Systems Specialist
- Join Date
- Dec 2003
- Location
- New Zealand
- Posts
- 1,265
mod_evasive will help with the hotlinking/high concurrent connections.
You can find china IP range lists via google, you will always get the occasional one that slips through. Not to mention the ones that use a proxy.
-
03-16-2008, 02:52 AM #3Aspiring Evangelist
- Join Date
- Nov 2007
- Posts
- 359
-
03-16-2008, 03:29 AM #4Newbie
- Join Date
- Feb 2008
- Posts
- 14
you can try csf also
-
03-16-2008, 03:31 AM #5Aspiring Evangelist
- Join Date
- Nov 2007
- Posts
- 359
-
03-16-2008, 05:42 AM #6Web Hosting Master
- Join Date
- Oct 2004
- Location
- Kerala, India
- Posts
- 4,771
It is a firewall program. You can see details at http://configserver.com/cp/csf.html
David | www.cliffsupport.com
Affordable Server Management Solutions sales AT cliffsupport DOT com
CliffWebManager | Access WHM from iPhone and Android
-
03-16-2008, 05:43 AM #7Hosting Systems Specialist
- Join Date
- Dec 2003
- Location
- New Zealand
- Posts
- 1,265
Check out www.configserver.com
They offer a free, easy to use and easy to install web GUI to control many aspects/configs;
Firewall Management
User process security (LFD)
ConfigServer.com also offers some other packages which can aid a lot in managing the basic security points of your linux-cpanel box.
Good luck
Best Regards,
Logan