09-24-2010 12:34 AM - edited 03-11-2019 11:44 AM
hi,
i need help on ASA 5520 and i would like to block countries IP address from the attack, there is any way to block countries ip address or range ip address .
Thanks,
Rabih
Solved! Go to Solution.
09-24-2010 04:23 AM
Here is the URL on how to check what IP Range the countries has:
http://www.find-ip-address.org/ip-country/
(NB: pls scroll down to the bottom of the page, choose the country and hit "Submit").
Hope that helps.
09-25-2010 05:56 AM
You can get the country ip blocks from here:-http://www.countryipblocks.net/country-blocks/19/
And then you can implement ACL's to block traffic coming in from these subnet range's.
Thanks
Puneet
09-24-2010 04:23 AM
Here is the URL on how to check what IP Range the countries has:
http://www.find-ip-address.org/ip-country/
(NB: pls scroll down to the bottom of the page, choose the country and hit "Submit").
Hope that helps.
02-03-2018 12:45 AM
Can I allow just one country and kick the rest off the world out ? As the usa has over 50 .000 ip,s the list of deny will be huge
09-25-2010 05:56 AM
You can get the country ip blocks from here:-http://www.countryipblocks.net/country-blocks/19/
And then you can implement ACL's to block traffic coming in from these subnet range's.
Thanks
Puneet
10-07-2014 06:48 AM
I've created a script where you chose an authority by selecting in a menu and it'll give you the configuration to drop into the ASA.
https://github.com/in-transit/regional-asa
You can block or allow a specific region if you want. I'll be upgrading it to do specific countries but now it does authorities like ARIN, RIPE, APNIC, etc.
08-14-2018 04:04 PM
Do you have an updated script? I know this is old, just wondering if you've updated it lately.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: