What about using geolocation to check IPs?<br><br><div class="gmail_quote">On Tue, Dec 9, 2008 at 3:33 PM, Josh More <span dir="ltr"><<a href="mailto:morej@alliancetechnologies.net">morej@alliancetechnologies.net</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">It's never going to be perfect, we know. There are mitigating factors<br>
that I cannot discuss on a public list. We're really just going for<br>
something that provides real security with a minimal interruption to<br>
operations. It's a difficult balance, but it should be possible if we<br>
accept a somewhat fuzzy definition of "done".<br>
<br>
Luckily, wireless is not a consideration for this one. (whew!)<br>
<div class="Ih2E3d"><br>
<br>
<br>
-Josh More, RHCE, CISSP, NCLP, GIAC<br>
<a href="mailto:morej@alliancetechnologies.net">morej@alliancetechnologies.net</a><br>
515-245-7701<br>
<br>
</div>>>> "Jeffrey Ollie" <<a href="mailto:jeff@ocjtech.us">jeff@ocjtech.us</a>> 12/09/08 3:24 PM >>><br>
<div><div></div><div class="Wj3C7c">On Tue, Dec 9, 2008 at 2:59 PM, Josh More<br>
<<a href="mailto:morej@alliancetechnologies.net">morej@alliancetechnologies.net</a>> wrote:<br>
> Does anyone on this list happen to have a handy reference for the<br>
> Internet IP addresses that Mediacom and Qwest assign to consumers in<br>
> Iowa? I need to secure a client to the best extent feasible. They're<br>
> Iowa-only and we need to block out specifically people from other<br>
> countries (I know, I know).<br>
><br>
> I'm thinking it would be easier to do allow the majority of local ISPs<br>
> and deny everything else, rather than trying to build a blacklist from<br>
> ARIN.<br>
<br>
I hope you're charging this client an nice hourly rate becuase this is<br>
going to be a difficult, if not impossible task. (Personally I'd say<br>
it's pointless, but it's their money I guess).<br>
<br>
Don't forget about "ISPs" like the ICN, U of I, and Iowa State.<br>
<br>
And what about wireless providers like Verizon, US Cellular, etc.?<br>
<br>
Might be worth looking into the various geolocation databases out there.<br>
<br>
--<br>
Jeff Ollie<br>
<br>
"You know, I used to think it was awful that life was so unfair. Then<br>
I thought, wouldn't it be much worse if life were fair, and all the<br>
terrible things that happen to us come because we actually deserve<br>
them? So, now I take great comfort in the general hostility and<br>
unfairness of the universe."<br>
<br>
-- Marcus to Franklin in Babylon 5: "A Late Delivery from<br>
Avalon"<br>
_______________________________________________<br>
Cialug mailing list<br>
<a href="mailto:Cialug@cialug.org">Cialug@cialug.org</a><br>
<a href="http://cialug.org/mailman/listinfo/cialug" target="_blank">http://cialug.org/mailman/listinfo/cialug</a><br>
<br>
_______________________________________________<br>
Cialug mailing list<br>
<a href="mailto:Cialug@cialug.org">Cialug@cialug.org</a><br>
<a href="http://cialug.org/mailman/listinfo/cialug" target="_blank">http://cialug.org/mailman/listinfo/cialug</a><br>
</div></div></blockquote></div><br>