Roger Price wrote:
> I find ipsets the natural way of setting up rules. I run a script which
> blocks whole countries, taking the country data from
> http://ipverse.net/ipblocks/data/countries/
Not a bad idea, but the database is sometimes wrong. Examples:
Duplicates (shall not be possible, but there exist entries):
- 194.114.128.0 is listed in ru.zone and se.zone
- 151.0.0.0 is listed in it.zone and ee.zone
Wrong entries:
- 109.70.64.0 is listed in de.zone, but should be in nl.zone
- 116.202.0.0 is listed in de.zone, but should be in zz.zone (unlocated)
Made only a first, rough test of my personal entries.
Be cautious when playing with such things. :-)
Best regards,
Klaus.
--
Klaus Singvogel
GnuPG-Key-ID: 1024R/5068792D 1994-06-27
