Block china

[mohman]

Hi, I have a quick question: How to block access from China to my webserver behind pfsense 1.2.2?
This mainly because Baiduspider crawler fills my httpd-access logs.
I need to block all access from range 220.181.. but how to put that to the firewall rule, without putting every single ip separately.

btw. Can snort help me?

[Supermule]

Just make a block rule before any other rule on your WAN.

My bid could be something like this…

[mohman]

Just what I'm looking for is that syntax for ip, that's 220.181.0.0/16. Where that /16 comes from?

Thank you for that, let's see how it works…
:)

[Supermule]

http://www.oav.net/mirrors/cidr.html