[DNS] IP Address range used only in Australia

[DNS] IP Address range used only in Australia

From: Skeeve Stevens <skeeve§skeeve.org>
Date: Mon, 3 Jul 2006 14:53:02 +1000
Something to consider.

Just because under APNIC records, a netblock is assigned to AU, doesn't mean
it is only used in AU.

I had confirmed from APNIC that if we wanted to chop a block up and route a
/24 in China, then we were allowed to do that anywhere in the APNIC
geographical coverage.

That said, not many would..... But it is possible that some AU space is used
in nethostile countries.

Something to consider.


-----Original Message-----
From: dns-bounces+skeeve=skeeve.org&#167;dotau.org
[mailto:dns-bounces+skeeve=skeeve.org&#167;dotau.org] On Behalf Of Graham Miller
Sent: Monday, 3 July 2006 11:38 AM
To: auDA DNS Mailing List
Subject: [DNS] IP Address range used only in Australia

Hello list members,

We are considering closing down certain ports/services on our hosting system
by limiting them to only australian IP addresses.

Trouble is, I am finding it really hard to get a list of address blocks that
are only Australian. Is there one list somewhere? Or by country?

The address block list assigned to APNIC is used throughout the region
including China. It is countries like China and Indonesia that I want to bar
from using services like ssh and ftp as these are the regions that seem to
have the most worm/hacker activity hitting our boxes.

The problem seems to be getting worse (on our systems anyway) and we have
seen multiple DoS attacks to these ports over the last couple of weeks. Most
of which come from Asia.

We are currently manually looking up each IP that attacks us and finding
it's address block and adding the block to the deny list. This is such an
inefficient way of doing it. We'd like to just ban certain countries or only
allow Australian IPs.

Any ideas how to achieve this?


Graham Miller
Technical Director

Web Enhanced Solutions Pty Ltd

List policy, unsubscribing and archives => http://dotau.org/
Received on Mon Jul 03 2006 - 04:53:02 UTC

This archive was generated by hypermail 2.3.0 : Sat Sep 09 2017 - 22:00:08 UTC