RE: Country based IPs

["Burton M. Strauss III" <BStrauss () acm org>]

Sure -- as part of the ntop configuration and install, we have a piece in
our makefile that downloads the files from the various registries and
creates our 'p2c' file (ip to country code).

Pull down the 2.2.9x test release from our SourceForge directory - it has
all the pieces - look at utils/p2c which is what the make invokes.

With that data in hand, you could probably create your filters through a
script.  You'll need to update this frequently, as new assignments happen
often in the blocks reserved for Cable Internet etc.

The reason for this round-about answer is that the script has the pointers
to the files created by the various registries showing their country code
assignments for the spaces delegated to them.

-----Burton

PS: A lot of the work was done by an Aussie gent who goes by the nom-de-net
of Anon E. Mouse (he even has a file of corrections to the 'official' data
if you want to get over the top with it).



-----Original Message-----
From: jbod [mailto:for_the_republic () yahoo com]
Sent: Wednesday, October 01, 2003 7:56 PM
To: security-basics () securityfocus com
Subject: Country based IPs


Does anyone have a list or know where to obtain one
that shows IPs allocated based upon country - for the
purpose of blocking ALL access from all non-US
locations unless implicitly allowed.



__________________________________
Do you Yahoo!?
The New Yahoo! Shopping - with improved product search
http://shopping.yahoo.com

---------------------------------------------------------------------------
----------------------------------------------------------------------------


---------------------------------------------------------------------------
----------------------------------------------------------------------------