Date: Wed, 9 May 2007 18:23:34 +0300 From: "Abdullah Ibn Hamad Al-Marri" <almarrie@gmail.com> To: Volker <volker@vwsoft.com> Cc: freebsd-pf@freebsd.org Subject: Re: Re: PF and GeoIP to update country table? Message-ID: <499c70c0705090823n49cc1897u24a8ccbb7e57b429@mail.gmail.com> In-Reply-To: <4641BC51.7080804@vwsoft.com> References: <499c70c0705090045q121d9a36n45c0bf6c69928273@mail.gmail.com> <46418C6A.5000607@quip.cz> <499c70c0705090201v3534eef2ybe9c2f7218e714dc@mail.gmail.com> <4641BC51.7080804@vwsoft.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On 5/9/07, Volker <volker@vwsoft.com> wrote: > On 12/23/-58 20:59, Abdullah Ibn Hamad Al-Marri wrote: > > Another question, how about the update per month? do I need to kill pf > > and run it again? or a crontab would do the trick and update the IPs? > > Abdullah, > > unfortunately I'm unable to imagine if it's nice or really, really bad > idea to block certain countries. It sounds like a chinese wall. If the > machine in question is a web server, it might be a hardly bad idea and > would lead into another dimension of separating the world. > > Anyway, if you want to replace the in-memory table with a fresh one > from disk, pfctl is your friend. Have a look at pfctl(8), especially > the parameters '-t' and '-T'. Doing a `pfctl -t mychinesewall -T > replace -f /tmp/dolistalltheworld.txt' would be enough. > > HTH > > Volker > Hello Volker, It's forum server with Arabic only contents, so only users in these Arabic countries would be able to connect to it. There are Arabs and ppl speak and read Arabic in the other countries but I have to lose them since the forum is getting 24/7 days hits by Arabic script kiddies who think they are elite and will flood it with fake http requests which kills the MySQL server right away. The problem is they have tons of bots run in m$ systems, and I have only 2 choices. Shut down the forum, or block other countries IPs, if you were in my place what would you do? *sigh* -- Regards, -Abdullah Ibn Hamad Al-Marri Arab Portal http://www.WeArab.Net/
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?499c70c0705090823n49cc1897u24a8ccbb7e57b429>