blocking a lot of ips?
 

say i need to block about 700 class c ips from a server, what would be the most effective way of doing so?

I've tried htaccess but the with that many lines it really slows things down.

I'm thinking there has to be a better solution using iptables or an access list somewhere. Any help would be appreciated.

Whoa ... thats why I can't download the rest of the internettyweb thingy. :arcadefre


Depending on the OS your running yes iptables or ipchains will do it better than .htaccess

how does freebsd handle 700+ entries in iptables?

never tried 700 ... can only comment on 30 to 40 ... 30 or 40 in .htaccess slows the server in IPtables never seen any significant resource drop

iptables ... you wont even see a slowdown.

htaccess is shit for serious biz like that.

thanks for the info man