Allow certain country's

[JimmyBoom]

Hey

How do you only allow certain country's to your server?
My solution was:

Code: Select all

allow {
	ip             LALA;
	hostname       *@*.nl;
	class           clients;
	maxperip 5;
};

and

Code: Select all

allow {
	ip             LALA;
	hostname       *@*.be;
	class           clients;
	maxperip 5;
};

But if someone connects and his IP cannot be resolved he can't get on the server, so that's not a solution for it.

Anyone else got a solution for this?

[Stealth]

You would need to look up the IPs of the countries you wish to allow, get their CIDR, and make allow blocks for each CIDR in the IP setting.

[JimmyBoom]

And where can you look up the IP's of the country?
I've found a site there is it in a *.txt file and that are too many.

What is CIDR?
Sorry if that's a lame question..

And where can you look up the IP's of the country?
I've found a site there is it in a *.txt file and that are too many.

What is CIDR?
Sorry if that's a lame question..

Is it like this:

196.32.208.0/21
199.7.70.0/24
199.7.82.0/24
etc..

So then it is:

Code: Select all

allow {
   ip             196.32.208.0/21;
   hostname       LALA;
   class           clients;
   maxperip 5;
};

Or is this wrong?

[Stealth]

The only way I know of to look up a country's CIDR ranges is to search for a list on Google. There are many for each country, even small ones

About CIDR: http://www.unrealircd.com/files/docs/un ... ature_cidr

Code: Select all

allow {
   ip             196.32.208.0/21;
   hostname       *.be;
   class           clients;
   maxperip 5;
};

[JimmyBoom]

And there's no faster way?
Because if there's not I'm busy a couple of days.

Can't it be:

Code: Select all

allow {
   ip            196.32.208.0/21
   ip            199.7.70.0/24
   ip            etc
  hostname       *.nl;
   class           clients;
   maxperip 3;
};

?

[Stealth]

There is only 1 IP and 1 hostname allowed per allow block.

[JimmyBoom]

Ok, too bad.
So I'm busy for a couple of days then..
But thx for the info

[JimmyBoom]

Aren't many IP's added each day to a country?
because if that's true, I must update it everytime..

[Jobe]

Yes, IP's do change from country to country but not that often, Either way it still means you will need to keep yourself up to date and change your configs every time.

[Stealth]

The best way to do this would probably be adding a feature on a website to request access or report the lack of access for IP ranges. Then tell your users to do this if they cannot access your server.

[JimmyBoom]

The best way to do this would probably be adding a feature on a website to request access or report the lack of access for IP ranges. Then tell your users to do this if they cannot access your server.

Yeah, was thinking about that, to add to the forum of my site if they can't connect.
Because I've already ahd some problems with CIDR, because not every IP-range is on it.

[Stealth]

Actually all Internet IP ranges should be on CIDR. Some ranges it's a little harder to get the CIDR for

[santa2452]

wouldnt it be easier to use a wild card for the ip.

Code: Select all

allow {
ip *;
host *@*.fr;
class clients;
maxperip 3;
};

[Casper]

It would be if all hosts could resolve.

[santa2452]

true just thought it would be easier but not all host resolve so it would be a bit difficult