Re: [arch-general] HTTP spam from China - CIDR compacting tool

2019-02-28 Thread Genes Lists via arch-general
On 2/28/19 9:21 AM, DcUK wrote: .. > > The aur/iprange package is another alternative for manipulating IP lists. > > It can optimize/merge/compare/convert in pretty much any way you like. Thanks - wasn't aware of this one either. A quick glance at source and it seems to be IPV4 only with no IPV6

Re: [arch-general] HTTP spam from China - CIDR compacting tool

2019-02-28 Thread DcUK
On Tue, Feb 26, 2019 at 04:25:37PM -0500, Genes Lists via arch-general wrote: > On 2/26/19 4:01 PM, brent s. wrote: > > ... > > > > You can (Gene, you may find this particularly useful since you feed to > > ipset) use the pyroute2.IPSet() function to actually manage the live > > > > Great thank

Re: [arch-general] HTTP spam from China - CIDR compacting tool

2019-02-26 Thread Juha Kankare via arch-general
On 26/02/2019 23:25, Genes Lists via arch-general wrote: > On 2/26/19 4:01 PM, brent s. wrote: > > ... >> You can (Gene, you may find this particularly useful since you feed to >> ipset) use the pyroute2.IPSet() function to actually manage the live >> > Great thank you - I wasn't aware of this capa

Re: [arch-general] HTTP spam from China - CIDR compacting tool

2019-02-26 Thread Genes Lists via arch-general
On 2/26/19 4:01 PM, brent s. wrote: ... > > You can (Gene, you may find this particularly useful since you feed to > ipset) use the pyroute2.IPSet() function to actually manage the live > Great thank you - I wasn't aware of this capability. I really like python! ipset made a huge difference - ma

Re: [arch-general] HTTP spam from China - CIDR compacting tool

2019-02-26 Thread Juha Kankare via arch-general
On 26/02/2019 23:01, brent s. wrote: > On 2/26/19 1:20 PM, Genes Lists via arch-general wrote: >> On 2/26/19 1:13 PM, Juha Kankare via arch-general wrote: >>> On 26/02/2019 20:11, Genes Lists via arch-general wrote: >> ... >>> My current script is just pulling cn.zone from ipdeny.com. This looks >>

Re: [arch-general] HTTP spam from China - CIDR compacting tool

2019-02-26 Thread brent s.
On 2/26/19 1:20 PM, Genes Lists via arch-general wrote: > On 2/26/19 1:13 PM, Juha Kankare via arch-general wrote: >> On 26/02/2019 20:11, Genes Lists via arch-general wrote: > ... >> >> My current script is just pulling cn.zone from ipdeny.com. This looks >> super useful, I'm saving it. Thank you

Re: [arch-general] HTTP spam from China - CIDR compacting tool

2019-02-26 Thread Genes Lists via arch-general
On 2/26/19 1:13 PM, Juha Kankare via arch-general wrote: > On 26/02/2019 20:11, Genes Lists via arch-general wrote: ... > > My current script is just pulling cn.zone from ipdeny.com. This looks > super useful, I'm saving it. Thank you dude! > You're welcome. I just ran it on cn.zone and it redu

Re: [arch-general] HTTP spam from China - CIDR compacting tool

2019-02-26 Thread Juha Kankare via arch-general
On 26/02/2019 20:11, Genes Lists via arch-general wrote: > Just an FYI if you pull cidr blocks by country, either doing it > yourself directly from arin et al or by using someone elses list like > ipdeny.com the CIDR blocks are not necessarily compacted. > > i.e. it is often not the most minima

Re: [arch-general] HTTP spam from China - CIDR compacting tool

2019-02-26 Thread Genes Lists via arch-general
Just an FYI if you pull cidr blocks by country, either doing it yourself directly from arin et al or by using someone elses list like ipdeny.com the CIDR blocks are not necessarily compacted. i.e. it is often not the most minimal CIDR representation. I use is this little python script, which w