All of lore.kernel.org
 help / color / mirror / Atom feed
From: "Thomas Lußnig" <tlussnig@bewegungsmelder.de>
To: Nick Drage <nickd@metastasis.org.uk>, netfilter@lists.netfilter.org
Subject: Re: Blocking Netranges Based on IP-to-Country CSV
Date: Mon, 20 Sep 2004 14:06:10 +0200	[thread overview]
Message-ID: <414EC7B2.5000904@bewegungsmelder.de> (raw)
In-Reply-To: <20040920115357.GE3786@metastasis.org.uk>

Hi,
i read some time the discussion about IP blocking based on Country.
Also there are some postitive Arguments for this idee. I personly think
that an include of this feature is
- Extereme overload for IP-tables since it need extreme large table of 
ip lists
- Is extreme faulty since IP's are not original assinged to country but 
locations like Europe.
- Political / Programming aspects. The kernel and iptables contain 
technical part wich mean
  plock an port, ip , range based on time flages etc.. It never 
contained Localisation like different languages for
 error reports and never country based selections.
- How you wan't to do the next step someone say i not wan't to select 
based on country bot wan't different web server
 for region's with different main language. ASIA -> UTF8/Chinese Europe 
Latin1/Frensh,German,English America => Spain/english
 there are many god ground for large selection map but NONE OF THEM is 
good enaught to include such maps in the kernel or iptables.

Cu Thomas


  reply	other threads:[~2004-09-20 12:06 UTC|newest]

Thread overview: 23+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2004-09-16 16:33 Blocking Netranges Based on IP-to-Country CSV Hudson Delbert J Contr 61 CS/SCBN
2004-09-17 11:46 ` Nick Drage
2004-09-18 13:25   ` Pascal Vilarem
2004-09-19 11:09     ` Nick Drage
2004-09-19 14:59       ` Alexis
2004-09-19  9:09   ` Mohamed Eldesoky
2004-09-19 11:01     ` Nick Drage
2004-09-19 11:17       ` Mohamed Eldesoky
2004-09-19 11:45         ` George Alexandru Dragoi
2004-09-20 11:53           ` Nick Drage
2004-09-20 12:06             ` Thomas Lußnig [this message]
2004-09-20 12:26               ` Chris Brenton
2004-09-20 13:20                 ` George Alexandru Dragoi
2004-09-20 12:16             ` Chris Brenton
  -- strict thread matches above, loose matches on Subject: below --
2004-09-20 13:57 nutbrownhares
2004-09-20 14:09 ` Jason Opperisano
2004-09-20 14:10 ` Alexis
2004-09-17 20:16 Hudson Delbert J Contr 61 CS/SCBN
2004-09-20 11:57 ` Nick Drage
2004-09-15 23:41 Gary & Mic McFall
2004-09-16  0:54 ` Frank Gruellich
2004-09-15 12:57 McFall, Gary
2004-09-16 14:16 ` Aleksandar Milivojevic

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=414EC7B2.5000904@bewegungsmelder.de \
    --to=tlussnig@bewegungsmelder.de \
    --cc=netfilter@lists.netfilter.org \
    --cc=nickd@metastasis.org.uk \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.