Hello list members,

We are considering closing down certain ports/services on our hosting system
by limiting them to only australian IP addresses.

Trouble is, I am finding it really hard to get a list of address blocks that
are only Australian. Is there one list somewhere? Or by country?

The address block list assigned to APNIC is used throughout the region
including China. It is countries like China and Indonesia that I want to bar
from using services like ssh and ftp as these are the regions that seem to
have the most worm/hacker activity hitting our boxes.

The problem seems to be getting worse (on our systems anyway) and we have
seen multiple DoS attacks to these ports over the last couple of weeks. Most
of which come from Asia.

We are currently manually looking up each IP that attacks us and finding
it's address block and adding the block to the deny list. This is such an
inefficient way of doing it. We'd like to just ban certain countries or only
allow Australian IPs.

Any ideas how to achieve this?

regards
Graham

Graham Miller
Technical Director

Web Enhanced Solutions Pty Ltd