Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [ip-blocking]

113 questions
3
votes
1 answer

How to block website for all countries except US and Canada

I have a website which is only for US and Canada visitors. I don't want to make it visible to other visitors. I want to use Geo targeting solution but I have a amazon hosting it did return current user IP Address so is there any way to getting user…
Dileep Kumar
  • 31
  • 1
  • 2
3
votes
1 answer

iptables block IP for x hours not working?

On my Linux server, I want to ban IPs that access certain ports for 24 hours using IPtables. For this, I use the following IPtables rules: # Check if IP is on banlist, if yes then drop -A INPUT -m state --state NEW -j bancheck -A bancheck -m recent…
azren
  • 131
  • 3
3
votes
2 answers

How to unblock my IP after failed sftp login attempts to google cloud compute instance

We just started using google cloud compute engine, and to connect to the server using sftp a couple of colleagues did a number of failed login attempts. Now we cannot access our google cloud engine vm instance from our office anymore, on any port…
mister j
  • 31
  • 1
  • 3
3
votes
4 answers

/etc/hosts.deny ignored in Ubuntu 14.04

I have Apache2 running on Ubuntu 14.04LTS. To begin securing network access to the machine, I want to start by blocking everything, then make specific allow statements for specific subnets to browse to sites hosted in Apache. The Ubuntu Server is…
Matt
  • 31
  • 1
  • 2
3
votes
1 answer

Fail2ban settings after changing ssh port

I switched my ssh port to 22000 and I changed the port settings in /etc/fail2ban/jail.local to specify to ban on both 22 and 22000 but when I tried failing to login 6 times, my connection was cutoff but was able to try logging in again immediately.…
Dirk Calloway
  • 252
  • 1
  • 2
  • 9
3
votes
3 answers

Banning people from accessing my sites

I was looking at my apache logs and saw this: [Wed Feb 02 00:56:54 2011] [error] [client 93.190.64.23] File does not exist: /srv/www/dogself.com/public_html/db [Wed Feb 02 00:56:54 2011] [error] [client 93.190.64.23] File does not exist:…
mkoryak
  • 171
  • 10
3
votes
2 answers

Apache deny from CIDR range but allow from IP within that range

I am using a long CIDR blacklist to block several countries from a site, but I need to allow specific IP addresses within the blocked CIDR ranges. Here's an excerpt of my conf file (this is the order that I am currently trying, though I have tried…
Chase
  • 33
  • 1
  • 3
3
votes
3 answers

Windows Server 2008 firewall rules order problem

I have one rule that opens FTP port for all connections. I have second rule that blocks ALL connections on ALL protocols for some IP's. However, connections from those IP's that are blocked can still connect to FTP port because that rule obviously…
vnuk
  • 506
  • 1
  • 8
  • 17
3
votes
3 answers

What is better for an IP ban? At firewall (shorewall) level, or at IIS level?

I have a spambot that likes to spam my websites. I mailed to abuse@isp, but he ignored me. Attacks always come from the same ip, and i used IISIP to add the spammer IP to all of my websites. I am wondering, since i am using a linux box with…
Magnetic_dud
  • 1,036
  • 2
  • 15
  • 29
2
votes
0 answers

Stop a user from circumventing IP block?

A user is somehow avoiding an IP block in apache 2.2/2.4, and I can not figure out how. The company I work for hosts hundreds of sites in different datacenters; this user is attacking several of the sites we host. Depending on the datacenter, the…
suhmedoh
  • 21
  • 1
2
votes
0 answers

Blocking IP range using iptables

What would the command be to block a range of IPs to port 80? The block of IP I want to block is 123.56.x.x and 123.57.x.x. What would the correct command be? iptables -I FORWARD -p tcp --dport 80 -s 123.57/15 -j DROP iptables -I FORWARD -p tcp…
chuacw
  • 145
  • 7
2
votes
2 answers

UFW (firewall) not blocking UDP right away

I have a PBX (phone system called Astersik) that works with udp and tcp. Sometimes I get invalid request from some IP addresses that I will like to block. I cannot block those requests until I reboot my computer. I think the reason is because UFW…
Tono Nam
  • 322
  • 3
  • 17
2
votes
2 answers

Blocking suspicious IPs on firewalls - still relevant?

In interest of improving security, does it make sense to block suspicious IPs on internet facing firewalls? Does anyone know of any reliable block lists? Thanks, Mark
Mark
  • 21
  • 1
2
votes
2 answers

deny from .htaccess with banned IP list from stopforumspam.com not working?

so i'm trying to use .htaccess to ban a large list (50,000) of suspicious spam IP addresses that i got from this site. the list is almost 1M in size when i add the deny from directive for each address in the list...but when i apply the loaded…
menriquez
  • 35
  • 5
2
votes
1 answer

Block all public IP addresses except those whitelisted

We have a 2008 R2 server hosted in a data centre where we have no physical access but connect to it using RDP. We plan to run SQL Server and some other services which should only be accessible to a limited number of static WAN IP…
Wayne Phipps
  • 218
  • 3
  • 9
1
2
3 4 5 6 7 8