RE: Country to IP range list

["Bill Gallagher" <bill.gallagher () augharue com>]

IMO almost futile.

I am in Ireland, but my external IP shows as Germany. Some sites have implemented a lookup such as you are discussing 
and if forces some web sites into German and some to be unavailable.

So you will have problems of legitimate customers being refused access and users who should be excluded being permitted.

Many users of satellite ISP services will have exactly this problem. IP addresses *cannot* be used reliably to 
determine anything except the ISP.

Just my 2c worth.

Bill 

-----Original Message-----
From: Dennis Cox [mailto:dcox () tippingpoint com]
Sent: Friday, January 07, 2005 6:50 PM
To: Kevin Barzdaitis; security-basics () lists securityfocus com
Subject: RE: Country to IP range list


Kevin,

 Why not put all the IP to Country information in a database. Then
search based on Country to find the IP's associated.

Dennis

-----Original Message-----
From: Kevin Barzdaitis [mailto:kevin () bidz com] 
Sent: Thursday, January 06, 2005 9:02 PM
To: security-basics () lists securityfocus com
Subject: Country to IP range list


Hello, all!
 
I have a situation here where specific services shall be offered ONLY to
specific countries. I think of blocking all IP addresses (on the
firewall)
for specific servers and allowing only IP ranges by Country. I was
wondering
if there exists publicly available list of "Country to IP ranges". I was
only able to find "IP to Country" mappings, but i need to check every
address specifically.
 
Thanks!