Preventing a country base from accessing website?

chatxplanet · 03-01-2007, 01:08 PM

Hey all,
I was wondering if there was a way to prevent a certain countries from accessing the homepage or making it redirect the user to an exit page?

for example, btcentralplus.com is a major provider in the UK. How would I be able to make it so those on that provider were redirected or prevented from accessing the website?

Thanks

MakePB · 03-01-2007, 01:16 PM

Sure it is.Go to IP Address Location and find all ranges for certain country. Insert it into database and then write script to check visitors ip address against country ranges into your database.When ip match then it will be redirected.

MakePB · 03-01-2007, 01:50 PM

To block btcentralplus (they have ip range 81.129.0.0 - 81.129.255.255) insert this into htaccess

Code:

Order Allow,Deny
Deny from 81.129.
Allow from all

The code above will block access to all visitors that have ip between ranges 81.129.0.0 - 81.129.255.255.

chatxplanet · 03-01-2007, 03:12 PM

thank you MakePB. I tried that and they are still accessing the website.

I went to that site but I was unable to find where you determined what the ranges were for btcentralplus.com. all i got was a .tz file loaded with ip ranges non-relevant.

Thanks for all your help.

MakePB · 03-01-2007, 03:39 PM

Quote:

Originally Posted by chatxplanet

thank you MakePB. I tried that and they are still accessing the website.

I went to that site but I was unable to find where you determined what the ranges were for btcentralplus.com. all i got was a .tz file loaded with ip ranges non-relevant.

Thanks for all your help.

The site that i gave to you will give you ranges for certain country.Only for country.But it can be usefull to find ranges for certain ip address.
I found through search engine one ip address for btcentralplus.It is 81.129.55.136.Then simple go to the address that i gave to you and look under link WhoIs and enter there that ip address.This is what site give back:

Code:

 Server Used: [ whois.ripe.net ]

81.129.55.136  = [ 81.129.55.136 ] 
 
  inetnum:      81.129.0.0 - 81.129.255.255 
  remarks: 
  remarks:       Please send abuse reports to abuse@btbroadband.com
 
  remarks: 
  netname:      BT-CENTRAL-PLUS 
  descr:        IP pools 
  country:      GB 
  admin-c:       BTCP1-RIPE 
  tech-c:        BTCP1-RIPE 
  status:       ASSIGNED PA 
  remarks:      Please send abuse notification to abuse@btbroadband.com
 
  mnt-by:        BTNET-MNT 
  mnt-lower:     BTNET-MNT 
  mnt-routes:    BTNET-MNT 
  source:       RIPE  Filtered 
  role:           BT CENTRAL PLUS - OPERATIONAL SUPPORT 
  remarks: 
  remarks:         Please send abuse reports to abuse@btbroadband.com
 
  remarks: 
  address:        BT 
  address:        Wholesale 
  address:        UK 
  abuse-mailbox:  abuse@btbroadband.com
 
  admin-c:         PC487-RIPE 
  tech-c:          SR401-RIPE 
  nic-hdl:         BTCP1-RIPE 
  mnt-by:          BTNET-MNT 
  source:         RIPE  Filtered 
  route:          81.128.0.0/12 
  descr:          BT Public Internet Service 
  origin:         AS2856 
  mnt-by:          BTNET-MNT 
  source:         RIPE  Filtered 




  Server results may be copyrighted and are used subject 
to the terms and conditions of the Server. 

  LastUpdate: : 2006/11/27

inetnum: 81.129.0.0 - 81.129.255.255 means that btcentraplus own ranges between 81.129.0.0 - 81.129.255.255.

btw

They cant access site if you know how to block them.I hope that you know and can use .htaccess
The code that i gave you is correct.

chatxplanet · 03-01-2007, 03:58 PM

thank you MakePB..that helped out quite a bit on the ip range portion. As far as .htaccess goes I do know how to set it up properly, even used your code verbatium to make sure i was doing it right and I am able to customize .htaccess for my site.

After placing the code into the .htaccess file, i then have a staff member that is using the btcentralplus.com provider and they can access my website each time. I then try going through my IP Deny Manager through CPanel (which places the same code into the .htaccess file but still nothing...not sure why its not working.

MakePB · 03-01-2007, 04:10 PM

Put your own ip address into code above and see of you can access your site.
If you receive 403 error it means that it works.
Then means also that code above works for btbroadband.com ranges.
The problem can be only that they have another ranges which i do not know. Looks to your log and to ip address from staff members of ask him what is his ip address then give it to me or simple go to the url above enter his ip address and see what the site will give you back.
I guess that they another ranges but you must only to find it out.
But first test to see of code above works with try to block your own ip address.

chatxplanet · 03-02-2007, 06:42 AM

Ok, I got it to work cept heres the deal.

That range for btcentralplus.com must be off because those ranges bans every OTHER providers in UK but NOT btcentral's. I tried locating additional ranges but was unsuccessful.

Anyone know a work-around or something. All help is appreciated because its very important I ban this. I have extremely abusive people and pedophiles (i make that claim because i actually have logs of a 33 year old man talking very sexual to a 13 year old trying to get her to give him her information) coming in under the btcentralplus.com domain and I need to stop it...unfortunately, I've already contacted the police in the areas of the offenders and given information but i'm told they wont do anything....gotta love the ole "we're here to protect and serve lie"

Will.Spencer · 03-02-2007, 06:47 AM

Ahhh... Britain... the land where police refuse to post photos of escaped murderers because it might violate the murderers rights to have their pictures posted publicly.

Source: http://www.thisislondon.co.uk/news/a...nse/article.do

MakePB · 03-02-2007, 06:51 AM

You need just to give me IP frokm the poeple that you would to block i will give you a whole range or you can do it same.I show you above how to do it.
So Ip.Go the website above.Perform whois on ip address.Get whole range for that ip address and then simple block it through .htaccess.

chatxplanet · 03-02-2007, 06:57 AM

host86-140-92-178.range86-140.btcentralplus.com that is the latest abusers host. BUT the thing is (i've banned him many many times) he is on a connection that is dynamic so he gets around the bans because his IP always changes with his host. I have tried doing what you showed me but it is simply not working with btcentralplus.com.

The ranges given, are banning other providers instead which is weird.

Anyways, thank you for all your help

MakePB · 03-02-2007, 07:11 AM

host86-140-92-178.range86-140.btcentralplus.com belong to ip range
86.136.0.0 - 86.141.255.255 by BT CENTRAL PLUS - OPERATIONAL SUPPORT
To block it use this code but you will probably block and a lot legitimate visitors from BT CENTRAL PLUS

Code:

Order Allow,Deny
Deny from 86.136.
Deny from 86.137.
Deny from 86.138.
Deny from 86.139.
Deny from 86.140.
Deny from 86.141.
Allow from all

chatxplanet · 03-02-2007, 07:22 AM

Thanks MakePB..i had already had those set...lets see if it actually works this time. Fate even shined on me..he had created an account on our forum and it took a series of ranges of ip's he used...all originating from 86.132 on up..so maybe I have him.

As far as blocking legitmates...i personally dont care at this moment. Per ratio, more of those from UK have been nothing but trouble (not saying all of them are because we have members, even staff, that are very nice) and I want it to stop.

chatxplanet · 03-02-2007, 07:48 AM

Nope, I tried what you said and it still isnt banning btcentral users in those ranges...is btcentral unbannable?? this is so annoying lol

it bans other users..just not btcentral..the one that owns the ranges.

WorldwideTrading · 03-02-2007, 07:59 AM

Perhaps all webmaster should group together and deny access to any users of Aohell, uhmm AOL.

MakePB · 03-02-2007, 08:00 AM

It does not have anything to do with one ISP or other one.I guess that you do something wrong but do not know what.
If you can block yourself (take your your ip address.I guess your ip is for example222.12.34.245 Try to put 222.12. into .htaccess and see of you are blocked.) you will block same way all other ranges.
One working formula count for all other ranges.There are not exception.

btw

Try

Code:

Order Allow,Deny
Deny from 86.136
Deny from 86.137
Deny from 86.138
Deny from 86.139
Deny from 86.140
Deny from 86.141
Allow from all

Try to enter it without dot at the end.

chatxplanet · 03-02-2007, 09:21 AM

ok, heres the deal because it seems your not understanding what I am saying.

I can ban all OTHER providers (this means I am doing it right)

but no matter what range of btcentralplus I use, it will NOT ban. They simply access the server like there is no ban placed.

Now, if I am successfully banning other providers, its safe to say I'm setting it up properly. I seriously do not think they are correct ranges.

I could be wrong, but I seriously do not think

MakePB · 03-02-2007, 09:30 AM

Thats are correct ranges:

Code:

86.140.92.178
host86-140-92-178.range86-140.btcentralplus.com
Host unreachable

86.136.0.0 - 86.141.255.255

* Please send abuse reports to abuse@btbroadband.com *
IP pools
GB

BT CENTRAL PLUS - OPERATIONAL SUPPORT
BT
Wholesale
UK

BT CENTRAL PLUS - OPERATIONAL SUPPORT
BT
Wholesale
UK

BT-CENTRAL-PLUS
Source: whois.ripe.net

This .htaccess code will block all ipaddresses between 86.136.0.0 - 86.141.255.255:

Code:

Order Allow,Deny
Deny from 86.136.
Deny from 86.137.
Deny from 86.138.
Deny from 86.139.
Deny from 86.140.
Deny from 86.141.
Allow from all

The only way that someone get around it is of using ip address that do not belong into blocked range above or using proxy server that is again from other ranges.
If you have set all correct only possible answer is that they access site from IP address that you still did not blocked into .htaccess

chatxplanet · 03-02-2007, 10:16 AM

actually I talked to my server techs today and the only ones getting through are btcentral so they are trying to figure out why.

everything else works fine...and we are even testing the bans using the staff that we have that are using btcentral and even though we ban their IP range..they still get through. Doesnt make sense but thats whats going on.

So, when even server techs set the .htaccess and the bans still dont stick. Something is definitely wrong.

MakePB · 03-02-2007, 02:54 PM

Actually it does not make any sense.One apache rules is rules for all.There is not any exception for anybody. btcentral is ont any exception.There is something what you doing wrong and i do not have any idea what or btcentral have another range that is not blocked.
Inexplicable incident into PC world does not exist.