From owner-freebsd-isp Mon Jan 7 13:19:58 2002 Delivered-To: freebsd-isp@freebsd.org Received: from matthew.uk1.vbc.net (pc-62-30-74-92-az.blueyonder.co.uk [62.30.74.92]) by hub.freebsd.org (Postfix) with ESMTP id E412837B404 for ; Mon, 7 Jan 2002 13:19:52 -0800 (PST) Received: from localhost (jdd@localhost) by matthew.uk1.vbc.net (8.11.6/8.11.6) with ESMTP id g07LIeV17146; Mon, 7 Jan 2002 21:18:47 GMT (envelope-from jdd@dixons.org) X-Authentication-Warning: matthew.uk1.vbc.net: jdd owned process doing -bs Date: Mon, 7 Jan 2002 21:18:39 +0000 (GMT) From: Jim Dixon X-X-Sender: To: Blake Crosby Cc: , Subject: Re: Restricting Users Geographically In-Reply-To: Message-ID: <20020107211415.Q91853-100000@matthew.uk1.vbc.net> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Mon, 7 Jan 2002, Blake Crosby wrote: > I currently run the (only) Canadian PostgreSQL www mirror. I am finding > people who aren't in Canada using the mirror, and somewhat bothered by this > fact. > > What I want to do is restrict users so that only Canadian visitors can > access the website. This would be easy if everyone had a .ca ccTLD has their > hostname - but that's not the case :/ > > Is there any way I can restrict users based on geographic location? Either > as an apache module, or some fancy way using IPFW? This is done by a number of large Web sites, notably the BBC, which has a mirror of their London Web site in New York. Users coming in via the LINX (the London Internet exchange) are served from London; everyone else is served from New York. The basic idea is that the LINX routing tables are made available to the BBC's name servers; if the requesting IP address is in those routing tables, names like www.bbc.co.uk resolve to something at the London Web farm, and otherwise it resolves to a server in New York. Because of asymmetric routing and other factors there is a certain amount of leakage. > Regards, > Blake Crosby > dev@samurai.com -- Jim Dixon jdd@dixons.org tel +44 117 982 0786 mobile +44 797 373 7881 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message