Block China and Russia

[treehouse786]

i would like to remove all possibility of my computer being able to connect to Chinese and Russian domains/networks.

go easy on me as i have no idea how to go about this but i would like to accomplish without installing anything (would just like to use windows 7 OS built in tools and maybe router config.

i do recall seeing similar threads but alas i could not find them using the search function.

thanks in advance

[Cudni]

Not sure how it can be done with Win7 only tools but in case you are willing to try and expand on other tools, see
http://www.okean.com/thegoods.html

[treehouse786]

thanks but what do i do with those i.p's?

how do i use them?

[aladdin]

Host file!

[m00nbl00d]

Originally Posted by King of Rapture

Host file!

You are the weakest link. Goodbye. (Sorry, but I had to say it. )

@ treehouse786

You could use the portable version of PeerBlock and use IP blacklists to block China and Russia.

[m00nbl00d]

Originally Posted by Cudni

Not sure how it can be done with Win7 only tools but in case you are willing to try and expand on other tools, see
http://www.okean.com/thegoods.html

Those will block China and Korea, not Russia.

[Cudni]

Originally Posted by m00nbl00d

Those will block China and Korea, not Russia.

What are you waiting for? Post them

[noway]

http://www.countryipblocks.net/

http://www.countryipblocks.net/country-blocks/


Sounds like a lot of work to me.

[m00nbl00d]

Originally Posted by Cudni

What are you waiting for? Post them

I could swear that I did. Then again, it was nearly 5 AM here.

Anyway user noway mentioned a site that provides them. Here you can get for different formats -https://www.countryipblocks.net/e_country_data/

Those for PeerBlock/PeerGuardian/other that supports the same format list are those lists ending with _pg2.txt

This is a direct link for PG2 format, though https://www.countryipblocks.net/coun...ks/pg2-format/ (I always missed this link in the main page, for some reason. )

You can also get them from here (different author(s)). -http://www.iblocklist.com/lists.php

I knew another service, but the lists haven't been updated in a while, since I last verified, though. I'll see if I can remember about it.

[J_L]

Where was your computer manufactured? Why are there Russian tools on your site, and I presume your setup?

[Pinga]

Originally Posted by J_L

Where was your computer manufactured?

Don't forget the network infrastructure

Seriously though, the notion that one's sense of safety can be enhanced by removing 'all possibility of my computer being able to connect to Chinese and Russian domains/networks' is not only naive - it's on the verge of racism.

[treehouse786]

Originally Posted by Pinga

Don't forget the network infrastructure

Seriously though, the notion that one's sense of safety can be enhanced by removing 'all possibility of my computer being able to connect to Chinese and Russian domains/networks' is not only naive - it's on the verge of racism.

i think YOU are being naive, i have been testing malware at an amateur level for many years and i know for a fact that most of the malware that 'calls home' have their home situated in china or russia.

on the verge of racism? lol its MY computer...i should be able to block whoever i want without any form of prejudice..

[treehouse786]

Originally Posted by J_L

Where was your computer manufactured? Why are there Russian tools on your site, and I presume your setup?

whats that got to do with anything? i paid for my computer so i can do as i wish with it. if all you have for input is 'morals related' then post on a different forum, this is a security forum.

by the way this is not for myself, it for my customers who would like this doing, my personal security will not be affected by blocking certain countries but less tech savvy people will benefit from this for sure.

[treehouse786]

Originally Posted by King of Rapture

Host file!

hi KOR

how do i add all the IP's to the host file without manually adding 127.0.0.1 before each IP?

[J_L]

Originally Posted by treehouse786

whats that got to do with anything? i paid for my computer so i can do as i wish with it. if all you have for input is 'morals related' then post on a different forum, this is a security forum.

by the way this is not for myself, it for my customers who would like this doing, my personal security will not be affected by blocking certain countries but less tech savvy people will benefit from this for sure.

Most computers are made in China. Morals are a part of computer security, especially malware and subjects like this.

Change you first contradictory post then. They won't be able to access much of the internet then.

[Cudni]

Please stay on subject. OP expressed a simple wish of blocking ip addresses.

[m00nbl00d]

Originally Posted by treehouse786

hi KOR

how do i add all the IP's to the host file without manually adding 127.0.0.1 before each IP?

You don't. You can't block IPs with the hosts file. Only domains. Unless there's some way, which I'd love to know about.

[m00nbl00d]

There's one more service where you can get lists to block countries.

-http://services.ce3c.be/ciprg/

-edit-

One more: -http://www.ipdeny.com/ipblocks/

[harsha_mic]

Am not sure with W7 inbuilt tools. but (if you are willing to try) with OA, you can simply add the list of countries you want to block it. Its just a matter of few clicks.

Thanks,
Harsha.

[treehouse786]

thanks for the info guys

[Daveski17]

Originally Posted by treehouse786

i would like to remove all possibility of my computer being able to connect to Chinese and Russian domains/networks.

go easy on me as i have no idea how to go about this but i would like to accomplish without installing anything (would just like to use windows 7 OS built in tools and maybe router config.

i do recall seeing similar threads but alas i could not find them using the search function.

thanks in advance

RequestPolicy (Firefox/SeaMonkey add-on) has a regional filter on set-up. If that's any help, I can't think of anything else.

[trismegistos]

Sophisticated attackers would use proxy or their captive botnets. Hardening your system(firewalls, NoScript, default-deny policy, etc) from such attacks is enough. No need to block some IP's or domains.

[stapp]

You could always take advantage of the latest offer of OA here

http://www.emsisoft.com/en/kb/articles/news111210/

Then you can use it to block what countries you want to.

[xxJackxx]

Originally Posted by m00nbl00d

You don't. You can't block IPs with the hosts file. Only domains. Unless there's some way, which I'd love to know about.

Correct. And if I were to go that direction, I would assign them all 0.0.0.0 rather than 127.0.0.1, and even then this will stop only outbound connections. It will do nothing for inbound. A properly configured firewall would take care of the inbound. Just pointing that out so nobody thinks a HOSTS file will stop it all.

[xxJackxx]

Originally Posted by stapp

You could always take advantage of the latest offer of OA here...

Looks like they are never going to support server OS (2008, 2008r2).