[CentOS] iptables to block region-specific ip's?

2011-05-11 Thread David Mehler
Hello, I'm running fail2ban on my centos machine. It's handling sshd and postfix, and is working quite well. From the reports I'm seeing all the atempts are from a certain registrar's region, I won't name it, and was wondering instead of blocking individual ip's if there was a way I could block

Re: [CentOS] iptables to block region-specific ip's?

2011-05-11 Thread Robert Spangler
On Wednesday 11 May 2011 12:58, the following was written: I'm running fail2ban on my centos machine. It's handling sshd and postfix, and is working quite well. From the reports I'm seeing all the atempts are from a certain registrar's region, I won't name it, and was wondering instead of

Re: [CentOS] iptables to block region-specific ip's?

2011-05-11 Thread David Hrbáč
Dne 11.5.2011 18:58, David Mehler napsal(a): With regards blocking ip's and fail2ban, which method is better in terms of system resources, blocking via iptables as in the case of sshd or blocking via hosts.deny as in the case of postfix?

Re: [CentOS] iptables to block region-specific ip's?

2011-05-11 Thread Ljubomir Ljubojevic
Robert Spangler wrote: On Wednesday 11 May 2011 12:58, the following was written: the atempts are from a certain registrar's region, I won't name it, iptables -I INPUT -i eth0 -s x.x.x.x/24 -j DROP I do not consider /24 subnet a region subnet. You would need to use something like

Re: [CentOS] iptables to block region-specific ip's?

2011-05-11 Thread David Mehler
Hello Everyone, Thanks for all your suggestions. I have gone with iptables and blocked off the necessary region ip blocks in my firewall. If anyone is interested i'll send the list. Thanks again. Dave. On 5/11/11, Ljubomir Ljubojevic off...@plnet.rs wrote: Robert Spangler wrote: On Wednesday

Re: [CentOS] iptables to block region-specific ip's?

2011-05-11 Thread David Milholen
On 5/11/2011 2:08 PM, Robert Spangler wrote: On Wednesday 11 May 2011 12:58, the following was written: I'm running fail2ban on my centos machine. It's handling sshd and postfix, and is working quite well. From the reports I'm seeing all the atempts are from a certain registrar's region,