How to block USA ips?

[Ruriko]

How do you block all USA ip's on your vps?

 

[MyDarkTower]

Wow not feeling the luv

 

[ibby]

i am <3

 

[CuraHack]

You can find ready to use .htaccess files to block countries:
http://www.countryipblocks.net/country-blocks/htaccess-deny-format/

 

[Ruriko]

sorry I forgot to mention I use nginx as my webserver so I can't use .htaccess

 

[futureawesome]

What's the point in blocking USA IP's?

If its to stop gov't and media reps from visiting your site there is no point. If they want to get to your site they will just use a proxy. You're blocking a lot of traffic by limiting yourself from USA.

anyways there are programs to convert htaccess to nginx rules

 

[gibalah]

I only know FreeBSD's pf can do it.
Install the port net-mgmt/netmask, and use the following command:

netmask `wget -qO- [URL]http://ftp.apnic.net/stats/apnic/delegated-apnic-latest[/URL] | awk -F'|' '/US\|ipv4/ {print $4":+"($5-1)}' > /etc/US_IP`

Edit the file /etc/pf.conf, and add these lines to appropriate position:

table <USIP> persist file "/etc/US_IP"
block in quick on $ext_if proto tcp from <USIP> to any port {80,443} label "block US IP"

Don't forget to set $ext_if to your network interface if you haven't used pf so far.

In this example, it only blocks http and https incoming connections; I think it's enough.
I think iptables of Linux has a similar facility, but I don't learn too much about Linux's firewall.

 

[Seeyabye]

Those htaccess files could be converted to nginx pretty much easily, just adding a few lines would do.

Look up nginx's doc, http://wiki.nginx.org/HttpAccessModule

 

[ultimatehostings]

You can install CSF and use US in CC_DENY and it will block almost all the US IP's.

 

[Desi_Boy]

are u suing wp ?

 

[Terabit-host]

You can use iptables. For example
http://www.howtoforge.com/xtables-addons-on-centos-6-and-iptables-geoip-filtering

 

[$_$]

You can find ready to use .htaccess files to block countries:
http://www.countryipblocks.net/country-blocks/htaccess-deny-format/

thanks bro, i am going to use that too.

 

[Putin]

You should consider using http://www.maxmind.com/app/ip-location so then it updates automaticly the IP ranges ... or you can do it the htaccess manual way like the other user posted... either way will do just fine

 

[msk19994]

oh noes the OP is scared of the FBI they will come to his site thats why he wants to block US ips
NO use man they can use proxies as others said