the description of address policy doesn't apply to the earlier days of address assignment, so there are chunks of address space assigned, for example, to entities (such as large companies) that don't map to countries or even continents very well.
there are a few commercial services that attempt to map IP addresses to location, at varying degrees of precision. CAIDA developed something called netgeo, which i believe they licensed to a commercial entity, which looks interesting. i don't think it requires reverse DNS. but one should note that all of these schemes can't correctly determine locations for all addresses, and at least in the case of web traffic, browsers being routed through a proxy (or an anonymizer) would give results that might defeat the intent of address mapping. -paul --On Thursday, 06 December, 2001 15:33 +0200 Daniel Mester <[EMAIL PROTECTED]> wrote: > Thanks Matthew - i see what you saying. But this service won't return any > results if there's no reverse dns. > I found this ones - i don't know - is here anybody using it? > http://geo-ip.com/ > http://where-is.info/ > > I guess that second ling using the perl script from the first link. > Thanks. > Daniel Mester. > > > ----- Original Message ----- > From: "Matthew" <[EMAIL PROTECTED]> > To: "Daniel Mester" <[EMAIL PROTECTED]> > Sent: Thursday, December 06, 2001 3:11 PM > Subject: Re: Block ip access from whole region (or country) > > >> Daniel, >> >> IPs are not assigned by country. >> >> IP assignments are to AS numbers and done by one of the assignment bodies > (eg >> RIPE for Europe). >> >> A network provider (incl ISP) will either have their own AS number and > their >> own assignment window, or will get an assignment from their upstream > provider. >> >> I know a number of European providers who have an American AS number and >> American assignemnts. >> >> Most Big European providers use one AS number for all of Europe (and a > good >> thing to do). >> >> If you are interested in where an IP comes from, the first place to look > is >> the appropriate registry that gave the assigmnet window. In Europe, > 99.99% >> will be from RIPE. Check out www.ripe.net and use the whois database and > look >> for, say >> -L 62.219.162.35 >> This shows that the IP is part of the assigmnet BEZEQINT-ADSL (Fixed ADSL > IPs) >> on AS number AS8551, country IL. >> AS8551 is Bezeq International. >> >> Country IL is Israel, so there is a good chance this IP is in Israel. >> >> >> Regards >> >> Matthew >> >> >> > Daniel Mester wrote: >> > >> > Hi all, >> > i was just wondering is there any service that i can use to block users > from >> > some regions - i mean if i do know user's ip address (i guess it is not >> > faked one or proxied) can i use some service that will approve that >> > user comes from region (or country) he is saying so? And further - can >> > i > block >> > users access from specified countries by ip blocks? Anything like that? >> > Thanks a lot. >> > Daniel. >> > > > _______________________________________________ > Firewalls mailing list > [EMAIL PROTECTED] > http://lists.gnac.net/mailman/listinfo/firewalls > _______________________________________________ Firewalls mailing list [EMAIL PROTECTED] http://lists.gnac.net/mailman/listinfo/firewalls
