Block china

mohman · Oct 31, 2009, 6:52 PM

Hi, I have a quick question: How to block access from China to my webserver behind pfsense 1.2.2?
This mainly because Baiduspider crawler fills my httpd-access logs.
I need to block all access from range 220.181.. but how to put that to the firewall rule, without putting every single ip separately.

btw. Can snort help me?

Supermule · Oct 31, 2009, 7:20 PM

Just make a block rule before any other rule on your WAN.

My bid could be something like this…

mohman · Oct 31, 2009, 9:09 PM

Just what I'm looking for is that syntax for ip, that's 220.181.0.0/16. Where that /16 comes from?

Thank you for that, let's see how it works…
:)

Supermule · Oct 31, 2009, 9:11 PM

http://www.oav.net/mirrors/cidr.html