deny from question

[crackn101]

Hi everyone.
First a little setup hist.
Windows XP Pro box running Apache 2.0.52
connection: DSL modem using linksys router with port 80
forwarding to specific webserver IP.
(Dedicated webserver with non-sensitive data.)
I have defined a <file> </file> entry in the conf file
that blocks exe,com,dll,sys etc file calls.
Site is up and running no problems.
My access log shows scan attempts, and web-dav exploit
attempts. I know everyone gets scan entries.
My Question is this, the majority of these scans come
from Milton,AU. I block the ip (first 3 segements if ip)
but the scans continue. Different IPs but still Milton, AU.
Rather than block the individual ip range, is there any
way to deny access based upon county code ?
I know this would have to include reverse-lookup somehow.
I'm not overly concerned about being hacked,
but if there are some practical measures i can take,
that's what i'm interested in finding out.
Thanks for any comments.

 

[Wishdiak]

Rather than block the individual ip range, is there any way to deny access based upon county code?

You can't set a deny condition based on country code. You could use several IP ranges, but the more you do this the more you may deny access to legitimate visitors.


Wishdiak

http://www.wishdiak.com

 

[crackn101]

Hi wishdiak.
Thanks for the feedback. I know that restricting ip ranges would limit users, but, truthfully, this server is generally meant to be used only by the employees of our company and a few select others. The main index page, and the contact page are the only 2 pages available to the general public without requiring a password.

cheers.