ip ranges

[ajbird]

HI there

I am trying to block

202.46.0.0. - 202.46.255.255

with

csf -d 202.46.0.0/16

However, my client is still complaining that these IP are trawling the site and I can still see them attached to the server

netstat -anp |grep 'tcp\|udp' | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n
1 122.225.109.220
1 202.46.49.101
1 202.46.50.128

any ideas what I am doing wrong?

[sawbuck]

Seems the range you need is more like 202.46.0.0 - 202.46.15.255 which would translate to 202.46.0.0/20.

Other option would be to block 202. completely: 202.0.0.0/8

[ajbird]

many thanks.. worked a treat