Welcome to the GoFuckYourself.com - Adult Webmaster Forum forums. You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload content and access many other special features. Registration is fast, simple and absolutely free so please, join our community today! If you have any problems with the registration process or your account login, please contact us. |
|
Discuss what's fucking going on, and which programs are best and worst. One-time "program" announcements from "established" webmasters are allowed. |
|
Thread Tools |
08-08-2012, 03:49 AM | #1 |
Confirmed User
Join Date: Jan 2003
Posts: 1,630
|
Question for server security gurus
We have a server that is constantly attacked by Chinese idiots. Is there a way to completely block all IP?s from China reaching the server? I am not only talking about blocking them from the site but completely blocking them from server. So they can?t scan ports, make login attempts etc.
We are running CentOS 6 on this server if that makes any difference. |
08-08-2012, 04:08 AM | #2 |
Damn Right I Kiss Ass!
Industry Role:
Join Date: Dec 2003
Location: Cowtown, USA
Posts: 32,320
|
Well... most hosts and nice people will tell you not to block entire ip subsets like that... But back when I ran tgp's for a living I used to block them and Russia...
Easy to do... But you are going to have to google for specific instructions for your server... freebsd? linux? windows? |
08-08-2012, 04:32 AM | #3 |
Confirmed User
Join Date: Feb 2005
Location: Montreal
Posts: 3,018
|
Also keep in mind that as IPv4 IP addresses have become so scarce, that people are selling off their hoarded subnets to the highest bidder, and blocking by GEO-location may not ensure that you are blocking the Chinese hackers.
I have seen US servers serving Indonesian IPs, and likewise I have seen Chinese servers serving German IP addresses ... as IPv4 addresses become harder to get, IP subnets are ending up in use in all different parts of the world. |
08-08-2012, 04:33 AM | #4 |
Too lazy to wipe my ass
Industry Role:
Join Date: Aug 2002
Location: A Public Bathroom
Posts: 38,161
|
Unplug your server from the internet - Job done & problem solved..
|
08-08-2012, 05:00 AM | #5 | |
Confirmed User
Join Date: Nov 2005
Posts: 2,149
|
Quote:
__________________
agentGFY *at* gmail.com |
|
08-08-2012, 05:22 AM | #6 |
Industry Role:
Join Date: Aug 2006
Location: Little Vienna
Posts: 32,234
|
Had same problem with china,resolved it with this:
http://www.configserver.com/cp/csf.html All what you need to do it it's to put CH into country block field and no more chinese on your server. |
08-08-2012, 11:09 AM | #7 |
Confirmed User
Industry Role:
Join Date: Nov 2009
Posts: 433
|
I had my host (ISPrime) block Russia using geoip, so yes(ish)
It doesn't stop them using proxies though!
__________________
--------------------------------------------------------- Webmaster of www.kinkykicks.net - Your 1 stop resource for ballbusting and cruel sexual femdom. Join our affiliate program at www.cash4kicks.com |
08-08-2012, 11:35 AM | #8 |
Industry Role:
Join Date: Aug 2006
Location: Little Vienna
Posts: 32,234
|
I have reason to believe if you block russia and china traffic you will reduce like 80% chance to be hacked and have any problem,and while they can use proxies they mostly uses their own ip's and it's all automated.
|
08-08-2012, 11:36 AM | #9 | |
Too lazy to set a custom title
Join Date: Mar 2002
Location: Australia
Posts: 17,394
|
Quote:
CN is China. |
|
08-08-2012, 11:39 AM | #10 |
Industry Role:
Join Date: Aug 2006
Location: Little Vienna
Posts: 32,234
|
|
08-08-2012, 12:06 PM | #11 | |
Confirmed User
Join Date: Jan 2003
Posts: 1,630
|
Quote:
|
|