RE: Country to IP range list

[Andres Martinez <artiman () artiman net>]

Instead of countries I would recommend to work based on continents if is posssible, it would be more easier.

Andres

----- Original Message -----
From: Bill Gallagher <bill.gallagher () augharue com>
To: Dennis Cox <dcox () tippingpoint com>, Kevin Barzdaitis <kevin () bidz com>, security-basics () lists securityfocus 
com
Sent: Fri,  7 Jan 2005 15:31:41 -0500
Subject: RE: Country to IP range list


> IMO almost futile.
>
> I am in Ireland, but my external IP shows as Germany. Some sites have
> implemented a lookup such as you are discussing and if forces some web sites
> into German and some to be unavailable.
>
> So you will have problems of legitimate customers being refused access and
> users who should be excluded being permitted.
>
> Many users of satellite ISP services will have exactly this problem. IP
> addresses *cannot* be used reliably to determine anything except the ISP.
>
> Just my 2c worth.
>
> Bill 
>
> -----Original Message-----
> From: Dennis Cox [mailto:dcox () tippingpoint com]
> Sent: Friday, January 07, 2005 6:50 PM
> To: Kevin Barzdaitis; security-basics () lists securityfocus com
> Subject: RE: Country to IP range list
>
>
> Kevin,
>
>  Why not put all the IP to Country information in a database. Then
> search based on Country to find the IP's associated.
>
> Dennis
>
> -----Original Message-----
> From: Kevin Barzdaitis [mailto:kevin () bidz com] 
> Sent: Thursday, January 06, 2005 9:02 PM
> To: security-basics () lists securityfocus com
> Subject: Country to IP range list
>
>
> Hello, all!
>  
> I have a situation here where specific services shall be offered ONLY to
> specific countries. I think of blocking all IP addresses (on the
> firewall)
> for specific servers and allowing only IP ranges by Country. I was
> wondering
> if there exists publicly available list of "Country to IP ranges". I was
> only able to find "IP to Country" mappings, but i need to check every
> address specifically.
>  
> Thanks!