Thread: Firewall with an enormous whitelist?

i run game server main game chat has been getting spammed extremely persistent attacker. appears using various proxy services bypass ip bans. we've managed slow him down in recent days blocking ip ranges in firewall (ufw), i'd implement more aggressive solution.

basically, i've obtained list of ip addresses of 40,000 users on our server in standing. wrote script identify ip ranges (starting /16--that is, 123.45.*.*) these users fall into, combining possible (so instead of listing 123.4.0.0/16 , 123.5.0.0/16 separately, script combines 2 123.4.0.0/15) create fewest possible allow rules add ufw.

however, doing this, end on 5000 rules.

don't know ufw handle this, if could, doesn't seem idea.

question is, know of way implement firewall--not ufw--that able handle enormous whitelist?

alternatively, if knows of way identify , block proxy users--using proxies violates our tos anyway--from accessing our server (it's on esoteric port--not 80 or that), preferable.

posted antar

i run game server main game chat has been getting spammed extremely persistent attacker. appears using various proxy services bypass ip bans. we've managed slow him down in recent days blocking ip ranges in firewall (ufw), i'd implement more aggressive solution.

basically, i've obtained list of ip addresses of 40,000 users on our server in standing. wrote script identify ip ranges (starting /16--that is, 123.45.*.*) these users fall into, combining possible (so instead of listing 123.4.0.0/16 , 123.5.0.0/16 separately, script combines 2 123.4.0.0/15) create fewest possible allow rules add ufw.

however, doing this, end on 5000 rules.

don't know ufw handle this, if could, doesn't seem idea.

question is, know of way implement firewall--not ufw--that able handle enormous whitelist?

alternatively, if knows of way identify , block proxy users--using proxies violates our tos anyway--from accessing our server (it's on esoteric port--not 80 or that), preferable.

for whitelisting of size recommend utilizing tcp wrappers (hosts.deny).

iptables doesn't block lists of nature, it's not it's designed for.

Forum The Ubuntu Forum Community Ubuntu Specialised Support Security [ubuntu] Firewall with an enormous whitelist?

Ubuntu