Merge pull request #3711 from FSSlc/patch-17

Update 20151215 How to block network traffic by country on Linux.md
This commit is contained in:
ictlyh 2016-01-05 09:18:18 +08:00
commit bc45f403de

View File

@ -1,3 +1,5 @@
FSSlc translating
How to block network traffic by country on Linux
================================================================================
As a system admin who maintains production Linux servers, there are circumstances where you need to **selectively block or allow network traffic based on geographic locations**. For example, you are experiencing denial-of-service attacks mostly originating from IP addresses registered with a particular country. You want to block SSH logins from unknown foreign countries for security reasons. Your company has a distribution right to online videos, which requires it to legally stream to particular countries only. You need to prevent any local host from uploading documents to any non-US remote cloud storage due to geo-restriction company policies.
@ -107,4 +109,4 @@ via: http://xmodulo.com/block-network-traffic-by-country-linux.html
[4]:http://xtables-addons.sourceforge.net/
[5]:https://support.maxmind.com/geoip-faq/geoip2-and-geoip-legacy-databases/how-accurate-are-your-geoip2-and-geoip-legacy-databases/
[6]:http://ask.xmodulo.com/add-cron-job-linux.html
[7]:https://en.wikipedia.org/wiki/ISO_3166-1
[7]:https://en.wikipedia.org/wiki/ISO_3166-1