Deny Domains

jonfa · 12-24-2005, 08:51 AM

Hi all,

How can I set up my Fedora 3 box to deny domains? For example, I know I will never need a user accessing my box from France, China, Russia, etc... so I'd like to go ahead and deny the domain. Is this the hosts.deny file? What is the syntax of this file for mutiple domains?

Also, would it be better to deny them from the hosts.deny file or from an iptables rule?

Thanks for the help.

win32sux · 12-24-2005, 03:56 PM

iptables... AFAIK, you'd want to block the country's IP addresses, not the domains... cuz to block by domain you'd have to do reverse-DNS lookups which suck cuz they can take a lot of time and won't be accurate a lot of the time... using geoip with iptables should do the trick...

check-out this thread: http://www.linuxquestions.org/questi...d.php?t=360119

and this google: http://www.google.com/linux?&q=geoip+iptables