Elo,

Done a script to ban IP ranges by country.

http://forum.ianbradshaw.co.uk/viewtopic.php?f=19&t=62

Needs perl and the required modules installed (see entry).

Beware : TEST THIS FIRST ... if you screw up the config file you will screw up your install. Make a database backup first!

I assume that if you select a lot of countries then the server will slow down ... so be sensible.

Suggest running it monthly as thats when the maxmind database gets updated ... any more is a waste of time unless you change your blocked countries.

S.

doh ... just realised percepts had done this using scripts ... meh

probably better to use the scripts than fill the database with blocked ip ranges ...

/me must check forum before doing something

S.

http://spameatingmonkey.com/geobl/usage.html

are you sure that you can't find working RBL with country blacklists

Never said you couldnt?

I was assuming (maybe wrongly) ... that i would be faster to do it locally than via another external connection for each mail check ... and guessed the IP range would kick in before rules / BL were processed.

S.

Wouldn't it just be easier to download the data from http://files.spameatingmonkey.com/public/countries/ instead of trying to parse the maxmind data?

Parsing maxmind data is easy once you add it to a database and takes only a minute to add the whole list to a database. Downloading all those files from spameatingmonkey once a week / month and parsing them seems very overcomplicated and long winded to me.

I used maxmind as I think it's quite reliable ... not found another source as good yet (thats my view, so thats what I coded, I'm sure other people have other views!).

The whole thing is automated - it downloads the maxmind data, unpacks it, parses it, adds it to the HMS ip ranges and blocks them.

Downloading a lot of individual files and parsing them seperately, converting the subnets etc is all just hassle when the maxmind stuff gives you one download and simple IP ranges.

Whats easier? ... depends on how you code ... everyone will code the same thing a million different ways ... and this is the one I knew.

Doesn't matter, unless you don't trust the maxmind data - in which case need to write your own one / adapt this one to use a different data source. Most of the code should be reuseable.

S.

My preference is to go by IP Range by "region" and reduce the number of entries. You can look up the IP blocks at http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.xml These blocks don't go through significant and frequent changes.

AfriNIC Africa, portions of the Indian Ocean
APNIC Portions of Asia, portions of Oceania
ARIN US, Canada, many Caribbean and North Atlantic islands
LACNIC Latin America, portions of the Caribbean
RIPE Europe, the Middle East, Central Asia

On Ver 5.4-B2012021601:
.