Blocking foreign country IP addresses with active response (shun).

mfrieden

I have everything I need to start blocking foreign country IP addresses except one thing and that's the enormous list of IP addresses.  There are some great websites out there to find the addresses I need but it's going to take me months to input everything.  Does anyone have any hints on how to do this?  Maybe some kind of CSV import?

Thanks,

Mark.

mfrieden

Never mind.  I asked SecureWorks to do Geo-Blocking and that did the trick.  For anything else that gets through I'm automatically shunning connections to our unused IP addresses and to/from ports on public IP's that are in use.  So far it's working great.  I am also able to automatically shun Email rejects from our Sophos Email appliance.