The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Blocking an ISP?

Discussion in 'General Discussion' started by Daemon1, Jul 8, 2004.

  1. Daemon1

    Daemon1 Well-Known Member

    Joined:
    Nov 26, 2003
    Messages:
    87
    Likes Received:
    0
    Trophy Points:
    6
    I am getting flooded out by some user on skynet.be, the IPs change to often to keep blocking them. Does anyone know how to block an entire ISP from accessing my server, either via IP tables or some other way? Thanks.
     
  2. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    You need to locate their IP blocks in one of APNIC/ARIN/RIPE and then use their CIDR to drop the whole network using iptables.
     
  3. Daemon1

    Daemon1 Well-Known Member

    Joined:
    Nov 26, 2003
    Messages:
    87
    Likes Received:
    0
    Trophy Points:
    6
    So if I were to block each one of them how would it be done?

    I found the IPs i need to ban on htp://www.fixedorbit.com/cgi-bin/cgirange.exe?ASN=5432. Using the first one listed as an example, how would be the correct format to ban the ip and all its ranges.

    62.4.128.0 start IP
    62.4.255.255 end IP

    /sbin/iptables -I INPUT -s 62.4.128.0/255 -j DROP

    Is that correct? Or does the format need to be different to cover that entire range
     
  4. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
  5. easyhoster1

    easyhoster1 Well-Known Member

    Joined:
    Sep 25, 2003
    Messages:
    659
    Likes Received:
    0
    Trophy Points:
    16
    A class C would be

    /sbin/iptables -I INPUT -s 62.4.128.0/24 -j DROP
     
Loading...

Share This Page