[Fwd: Re: Blocking Netranges Based on IP-to-Country CSV]

[Aleksandar Milivojevic <amilivojevic@pbl.ca>]

[-- Attachment #1: Type: text/plain, Size: 256 bytes --]

Probably needed to end up on the list...

-- 
Aleksandar Milivojevic <amilivojevic@pbl.ca>    Pollard Banknote Limited
Systems Administrator                           1499 Buffalo Place
Tel: (204) 474-2323 ext 276                     Winnipeg, MB  R3T 1L7

[-- Attachment #2: Re: Blocking Netranges Based on IP-to-Country CSV --]
[-- Type: message/rfc822, Size: 2345 bytes --]

From: "Nicolas Bouliane" <nib@cookinglinux.org>
To: amilivojevic@pbl.ca
Subject: RE: Blocking Netranges Based on IP-to-Country CSV
Date: Thu, 16 Sep 2004 13:56:53 -0400 (EDT)
Message-ID: <25974.207.162.80.7.1095357413.squirrel@207.162.80.7>

Gary & Mic McFall wrote:

>Due to a number of issues, my organization is reviewing the ability to
>block certain country domains at the firewall.  To be proactive, we want
>to automate that process via iptables & the CSV available at
><http://ip-to-country.webhosting.info>.

I currently work on a match geoip based on the maxmind database.
You can observe my development state to:
http://codepoet.cookinglinux.net/cgi-bin/blosxom.cgi

and my current source code at:
http://www.cookinglinux.org/projects/netfilter-iptables/geoip_alpha-0.3/

Anyway I really dont know if my concept is ok. Using netlink in a match. I
was wait to have a usable code to post.

If you plan to use my source code, please let me know, thanks.


--
Nicolas Bouliane
nib@cookinglinux.org