How to block USA ips?

[Ruriko]

How do you block all USA ip's on your vps?

Ruriko Reviewed by Ruriko on 28th Jan 2012. How to block USA ips? How do you block all USA ip's on your vps? Rating: 5

[MyDarkTower]

Wow not feeling the luv

[ibby]

i am

[CuraHack]

You can find ready to use .htaccess files to block countries:
http://www.countryipblocks.net/count...s-deny-format/

[$_$]

You can find ready to use .htaccess files to block countries:
http://www.countryipblocks.net/count...s-deny-format/

thanks bro, i am going to use that too.

[Putin]

You should consider using http://www.maxmind.com/app/ip-location so then it updates automaticly the IP ranges ... or you can do it the htaccess manual way like the other user posted... either way will do just fine

[Ruriko]

sorry I forgot to mention I use nginx as my webserver so I can't use .htaccess

[futureawesome]

What's the point in blocking USA IP's?

If its to stop gov't and media reps from visiting your site there is no point. If they want to get to your site they will just use a proxy. You're blocking a lot of traffic by limiting yourself from USA.

anyways there are programs to convert htaccess to nginx rules

[gibalah]

I only know FreeBSD's pf can do it.
Install the port net-mgmt/netmask, and use the following command:

netmask `wget -qO- http://ftp.apnic.net/stats/apnic/delegated-apnic-latest | awk -F'|' '/US\|ipv4/ {print $4":+"($5-1)}' > /etc/US_IP`

Edit the file /etc/pf.conf, and add these lines to appropriate position:

table <USIP> persist file "/etc/US_IP"
block in quick on $ext_if proto tcp from <USIP> to any port {80,443} label "block US IP"

Don't forget to set $ext_if to your network interface if you haven't used pf so far.

In this example, it only blocks http and https incoming connections; I think it's enough.
I think iptables of Linux has a similar facility, but I don't learn too much about Linux's firewall.

[Seeyabye]

Those htaccess files could be converted to nginx pretty much easily, just adding a few lines would do.

Look up nginx's doc, http://wiki.nginx.org/HttpAccessModule