how can i deny all ip from china?

[crazyaboutlinux]

how can i deny all ip from china?


they have serveral range ip.

[Infopro]

If you have CSF installed, you may find this thread useful.

http://forum.configserver.com/showthread.php?t=2248

[crazyaboutlinux]

If you have CSF installed, you may find this thread useful.

http://forum.configserver.com/showthread.php?t=2248

yes we have installed CSF & i read this thread & i found this

This option should not be enabled on servers with long dynamic chains

what do you say Inforpro

[Infopro]

I commented in that thread I linked you to with my thoughts on blocking all of china.
If you go to your CSF config page and find the section CC_DENY = you can read the warning posted there by the dev.

Here's a snip of that warning:

#
# Warning: Some of the CIDR lists are huge and each one requires a rule within
# the incoming iptables chain. This can result in significant performance
# overheads and could render the server inaccessible in some circumstances. For
# this reason (amongst others) we do not recommend using these options
#