From owner-freebsd-isp  Mon Jan  7 13:19:28 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from squall.waterspout.com (squall.waterspout.com [208.13.56.12])
	by hub.freebsd.org (Postfix) with ESMTP id 6361237B417
	for <freebsd-isp@freebsd.org>; Mon,  7 Jan 2002 13:19:24 -0800 (PST)
Received: by squall.waterspout.com (Postfix, from userid 1050)
	id 6C34A9B08; Mon,  7 Jan 2002 16:19:22 -0500 (EST)
Date: Mon, 7 Jan 2002 16:19:22 -0500
From: Will Andrews <will@csociety.org>
To: Blake Crosby <dev@samurai.com>
Cc: isp-webhosting@isp-webhosting.com, freebsd-isp@freebsd.org
Subject: Re: Restricting Users Geographically
Message-ID: <20020107161922.F73815@squall.waterspout.com>
Reply-To: Will Andrews <will@csociety.org>
Mail-Followup-To: Blake Crosby <dev@samurai.com>,
	isp-webhosting@isp-webhosting.com, freebsd-isp@freebsd.org
References: <JAEEIJKIHAONENKPFCCPGEPCCBAA.dev@samurai.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <JAEEIJKIHAONENKPFCCPGEPCCBAA.dev@samurai.com>
User-Agent: Mutt/1.3.22.1i
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

On Mon, Jan 07, 2002 at 01:35:05PM -0500, Blake Crosby wrote:
> I currently run the (only) Canadian PostgreSQL www mirror. I am finding
> people who aren't in Canada using the mirror, and somewhat bothered by this
> fact.
> 
> What I want to do is restrict users so that only Canadian visitors can
> access the website. This would be easy if everyone had a .ca ccTLD has their
> hostname - but that's not the case :/
> 
> Is there any way I can restrict users based on geographic location? Either
> as an apache module, or some fancy way using IPFW?

Why do you want to do this?  The USA is pretty close to Canada
and we have fast links there too.  If you don't like it, try this
a multi-tier policy:

	1) give all known canadians, eg. *.ca, *.wave.home.com,
	   etc. full access to the server
	2) lock out people of other known non-canadian hosts.
	   e.g. *.my, 202.*, *.mx, *.fr, ...
	3) b/w limit everyone else.

-- 
wca

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message