On Fri, 06 Jan 2012 18:05:14 +0000
shorewall-users-request@lists.sourceforge.net wrote:
> On Fri, 2012-01-06 at 12:34 +0100, Timothy Murphy wrote:
> >
> > I''d be very interested to know if Tom Eastep approves or
disapproves
> > of this script ...
>
> Personally, I disapprove of the whole concept of country blocking but
> that''s just my personal opinion. If I were to implement country
> blocking, I would use an ipset rather than a long chain of blacklist
> rules.
>
> -Tom
This question seems to come up frequently. Here is a set of example
scripts I made that demonstrate the use of ipset for such blacklisting.
The second example pertains to blocking entire countries, which is a
practice of questionable value but which seems to appeal to many.
http://forums.gentoo.org/viewtopic-t-863121.html
------------------------------------------------------------------------------
Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don''t need a
complex
infrastructure or vast IT resources to deliver seamless, secure access to
virtual desktops. With this all-in-one solution, easily deploy virtual
desktops for less than the cost of PCs and save 60% on VDI infrastructure
costs. Try it free! http://p.sf.net/sfu/Citrix-VDIinabox