For web hosting companies it becomes critical to be able to block entire countries such as China and Vietnam permanently or at least during a denial of service (DOS) attack. Blocking several countries could require thousands of IP CIDR ranges (see ipdeny.com), which lists the IPs for most countries.
1) Can m0n0wall handle so many rules by copying and pasting them in to the config.xml file? Or what would be the best means to add a large number of to m0n0wall?
2) How can I estimate the amount of RAM required to hold 2,000 rules?
3) Has anyone successfully added 1,000+ rules?
In advance, I appreciate any guidance.
--Gil Vidals
|
Topic: Blocking entire countries