RE: Country to IP range list

[Luis Lopez Sanchez <luis.lopez () atosorigin com>]

Hi All,

An interesting link about this issue:

http://software77.net/cgi-bin/ip-country/geo-ip.pl

Regards,

--
Luis Lopez
Shared Resources
Atos Origin
Albarracin 25 Madrid 28037
Spain 
Phone:  +34912148800
luis.lopez () atosorigin com
www.atosorigin.com

pub  1024D/8A688104 1999/07/28 Luis Lopez <luis.lopez () atosorigin com>
Key fingerprint = 550F 3545 C847 F61E 821C 3D8C 1A12 2C19  8A68 8104 



-----Original Message-----
From:   Erik Norgaard [mailto:norgaard () locolomo org]
Sent:   Fri 1/7/2005 9:01 PM
To:     Kevin Barzdaitis
Cc:     security-basics () lists securityfocus com
Subject:        Re: Country to IP range list

Kevin Barzdaitis wrote:

> I have a situation here where specific services shall be offered ONLY to
> specific countries. I think of blocking all IP addresses (on the firewall)
> for specific servers and allowing only IP ranges by Country. I was wondering
> if there exists publicly available list of "Country to IP ranges". I was
> only able to find "IP to Country" mappings, but i need to check every
> address specifically.

RIPE/LACNIC/APNIC/ARIN has lists published with the assignment of ip- 
ranges. From this you can pick out any country you like and get the 
corresponding ip-ranges - they are not assigned in nice chunks though.

You should be aware that this doesn't solve your whole problem, people 
can still connect through proxies, and some ranges are not assigned to 
countries but rather to organisations/purposes, eg. 24/8 to cable 
internet providers.

If interested, I have a perl script you can hack up, specify countries 
as command line options and it concattenates the corresponding ip-ranges 
to output the minimal number of lines. Only works for ipv4 though.

Cheers, Erik

-- 
Ph: +34.666334818                                  web: www.locolomo.org
S/MIME Certificate: http://www.locolomo.org/crt/2004071206.crt
Subject ID:  A9:76:7A:ED:06:95:2B:8D:48:97:CE:F2:3F:42:C8:F2:22:DE:4C:B9
Fingerprint: 4A:E8:63:38:46:F6:9A:5D:B4:DC:29:41:3F:62:D3:0A:73:25:67:C2





------------------------------------------------------------------
This e-mail and the documents attached are confidential and intended solely
for the addressee; it may also be privileged. If you receive this e-mail
in error, please notify the sender immediately and destroy it.
As its integrity cannot be secured on the Internet, the Atos Origin group
liability cannot be triggered for the message content. Although the
sender endeavours to maintain a computer virus-free network, the sender does
not warrant that this transmission is virus-free and will not be liable for
any damages resulting from any virus transmitted.

Este mensaje y los ficheros adjuntos pueden contener informacion
confidencial destinada solamente a la(s) persona(s) mencionadas
anteriormente. Pueden estar protegidos por secreto profesional Si usted
recibe este correo electronico por error, gracias de informar inmediatamente
al remitente y destruir el mensaje.
Al no estar asegurada la integridad de este mensaje sobre la red, Atos
Origin no se hace responsable por su contenido. Su contenido no constituye
ningun compromiso para el grupo Atos Origin, salvo ratificacion escrita por
ambas partes.
Aunque se esfuerza al maximo por mantener su red libre de virus, el emisor
no puede garantizar nada al respecto y no sera responsable de cualesquiera
danos que puedan resultar de una transmision de virus
------------------------------------------------------------------