Security Basics mailing list archives
Re: Country based IPs
From: "Meritt James" <meritt_james () bah com>
Date: Fri, 03 Oct 2003 09:14:17 -0400
We did it that way in the "good old days" to generate out hosts files, but that rapidly became unworkable due to the number of IPs and that lead to the introduction of name servers... I would recommend against taking a great step backwards if at all possible... Jim "Matthew F. Caldwell" wrote:
Dale and Jbod, If you want a database download you can request it from ARIN, it's a difficult to parse format (to prevent spammers). HERE is the form have fun! http://www.arin.net/library/agreements/bulkwhois.pdf As part of our product neuSECURE, we maintain a database of all known netblocks from the sources ARIN, APNIC, RIPE, etc. The data is refreshed on a regular basis. We use this data to allow better macro correlation in our product. You can create rules that specify if you see something from a particular country,block,and ranges it can perform actions including block it at the firewall, email me, create a ticket etc. Matt Matthew F. Caldwell, CISSP Founder and Chief Security Officer GuardedNet, Inc. -----Original Message----- From: Dale Fay [mailto:dalef () merit edu] Sent: Thursday, October 02, 2003 12:26 PM To: jbod Cc: security-basics () securityfocus com Subject: Re: Country based IPs Such a list would be difficult to create and impossible to maintain. Netblocks are allocated from one of the four regional sources, ARIN, RIPE, APNIC and a new one in Latin America, based on the location of the requester, but could be used anywhere in the world. On Wed, Oct 01, 2003 at 05:56:01PM -0700, jbod wrote:Does anyone have a list or know where to obtain one that shows IPs allocated based upon country - for the purpose of blocking ALL access from all non-US locations unless implicitly allowed. __________________________________ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com------------------------------------------------------------------------ --------------------------------------------------------------------------- ---- -- Dale Fay Merit Systeam/RADB www.merit.edu www.radb.net ------------------------------------------------------------------------ --- ------------------------------------------------------------------------ ---- --------------------------------------------------------------------------- ----------------------------------------------------------------------------
-- James W. Meritt CISSP, CISA Booz | Allen | Hamilton phone: (410) 684-6566 --------------------------------------------------------------------------- ----------------------------------------------------------------------------
Current thread:
- Re: Country based IPs, (continued)
- Re: Country based IPs Dale Fay (Oct 02)
- Re: Country based IPs Markus Rossi (Oct 02)
- RE: Country based IPs digitz (Oct 02)
- Re: Country based IPs ScoutMirim (Oct 02)
- RE: Country based IPs Burton M. Strauss III (Oct 08)
- RE: Country based IPs Thomas H. Roemer (Oct 02)
- Re: Country based IPs Fábio Alves (Oct 02)
- RE: Country based IPs Seyberth Allan R Contr AFRL/VSIO (Oct 02)
- Re: Country based IPs salgak (Oct 02)
- RE: Country based IPs Matthew F. Caldwell (Oct 02)
- Re: Country based IPs Meritt James (Oct 03)
- RE: Country based IPs James McKiernan (Oct 03)
- RE: Country based IPs Matthew F. Caldwell (Oct 03)
- Re: Country based IPs Meritt James (Oct 03)
- Re: Country based IPs Meritt James (Oct 03)
- Weird TCP 1755 port on freebsd box Rick Zhong (Oct 06)
- Re: Weird TCP 1755 port on freebsd box Ranjeet Shetye (Oct 06)
- Re: Weird TCP 1755 port on freebsd box Rick Zhong (Oct 06)
- Re: Weird TCP 1755 port on freebsd box Jackson Alley (Oct 08)