09-24-2010 12:34 AM - edited 03-11-2019 11:44 AM
hi,
i need help on ASA 5520 and i would like to block countries IP address from the attack, there is any way to block countries ip address or range ip address .
Thanks,
Rabih
Solved! Go to Solution.
09-24-2010 04:23 AM
Here is the URL on how to check what IP Range the countries has:
http://www.find-ip-address.org/ip-country/
(NB: pls scroll down to the bottom of the page, choose the country and hit "Submit").
Hope that helps.
09-25-2010 05:56 AM
You can get the country ip blocks from here:-http://www.countryipblocks.net/country-blocks/19/
And then you can implement ACL's to block traffic coming in from these subnet range's.
Thanks
Puneet
09-24-2010 04:23 AM
Here is the URL on how to check what IP Range the countries has:
http://www.find-ip-address.org/ip-country/
(NB: pls scroll down to the bottom of the page, choose the country and hit "Submit").
Hope that helps.
02-03-2018 12:45 AM
Can I allow just one country and kick the rest off the world out ? As the usa has over 50 .000 ip,s the list of deny will be huge
09-25-2010 05:56 AM
You can get the country ip blocks from here:-http://www.countryipblocks.net/country-blocks/19/
And then you can implement ACL's to block traffic coming in from these subnet range's.
Thanks
Puneet
10-07-2014 06:48 AM
I've created a script where you chose an authority by selecting in a menu and it'll give you the configuration to drop into the ASA.
https://github.com/in-transit/regional-asa
You can block or allow a specific region if you want. I'll be upgrading it to do specific countries but now it does authorities like ARIN, RIPE, APNIC, etc.
08-14-2018 04:04 PM
Do you have an updated script? I know this is old, just wondering if you've updated it lately.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide