How to save your proxy from Iran.

i think the reason for those countries using the most bandwith is because their government has restrictions on what type of content they can view on the web. so when they find a proxy, they might use it all day long without clicking on ads. i am starting proxies and i already know that my target audience are high school students since they are in computer class for about an hour and are more likely to click on the ads such as "GET FREE RINGTONES NOW"

you get what i mean?

 

Question -
When you say ##.##.##/#, does the / mean add 1 through lets say 20 because you dint feel like typing every singly IP? Or is the actual IP adress just ##.##.##/#? ...If that made sense to you, and answer would be great! Thanks... Nicolas

 

The /19 etc. refers to the CIDR bitmask to apply to the address on that subnet. So for a /19 network, the first 19 bits are not permitted to change , but the remaning 13 bits can be used to indicate unique hosts on the network. If you break down the four octets of an IP address in to binary digits, you'll get four sets of 0 and 1's. For a /19 network for example the rightmost 13 binary digits may alter to specify individual hosts on the network. So blocking a /19 network blocks,

0000000000000
0000000000001
0000000000010
0000000000011
.
.
.
.
1111111111110
1111111111111

Which turns out to be 2^13 individual IP addresses = 8192.

 

I am sorry for another such newbie question, but in .HTACCESS, do I just put the code anywhere? Top, bottom? Or will it only work if I incorporate the code with some stuff that is already there? Thanks... Nicolas

 

Thanx for sharing this htaccess code

 

I would really appreciate a list like this for china , china is hammering my site REAL bad.

 

just go here http://www.ipaddresslocation.org/ip_ranges/get_ranges.php and select china to get the IP address

Thanks for posting this BTW, very useful site.

usefult to ban certain countries for security reasons too, theres a lot of atacks launched from places like china and vietnam due to open proxies and hacked servers, just ban them all.

 

Adding all these subnets to block, does this impact the performance of the httpd noticeably?

 

hmmmm, not sure about htaccess but I have quite a lot added into the "deny sites" list in CSF firewall and its ok.

If your in a position to install a firewall (or add rules to the iptable) on your server when I recomend you do this, then the traffic is blocked before it even hits apache.

 

Or you can just use GeoIP, makes everything much simpler.
http://www.samdaves.com/blog/2007/0...-specific-countries-from-accessing-your-site/

 

Geo IP?
whats that?
and how dose it work?

 

GeoIP is an open source project, it already has a pre defined list of countries built into it. You just add the ones you want to allow to your site, and it only allows those. You can get the files from my post above.

 

Nice blog post that mate, very helpful, green rep added

looks like you can get the latest geo database from here: http://www.maxmind.com/app/geolitecountry