On Tue, 15 Apr 2008, in the Usenet newsgroup comp.os.linux.networking, in
>>> Would it be possible to have an IP tables rule such that any packets
>>> from this domain [hinet.net], addressed to a given port, are rejected
>>> without further ado?
>> Not by (domain) name, no.
Simple reason - there are a number of domains in the world who are either
to st00pid to be able to configure a PTR record on their DNS, or who don't
feel it's needed (RFCs like 2050 and 2051 don't apply to them, or they
couldn't read them if they tried). This is usually the case with abusive
ISPs. Thus, depending on a domain name lookup is a waste of your time.
Quote:>> But if you can determine the set of IP address ranges that hinet.net
>> uses you can drop those quietly on the floor with iptables.
Problem: They are a major provider.
>> [Quick check with whois...]
>> inetnum: 184.108.40.206 - 220.127.116.11 netname: Hinet
>> descr: CHTD, Chunghwa Telecom Co., Ltd. country: TW
It might be better to check with whois.twnic.net (the whois service for
Taiwan), but they have their own problems.
Quote:> The IP addresses in my logs seem to have been dynamically
>allocated, and they always start with either 122.116 or 118.169 - never
[compton ~]$ grep -i hinet IP_admin/address.blocks
18.104.22.168 - 22.214.171.124 HINET-NET Chunghwa Telecom Co., Ltd. hinet.net
126.96.36.199 - 188.8.131.52 Hinet Chunghwa Telecom Co., Ltd.
184.108.40.206 - 220.127.116.11 Hinet Chunghwa Telecom Co., Ltd.
18.104.22.168 - 22.214.171.124 Hinet Chunghwa Telecom Co., Ltd
126.96.36.199 - 188.8.131.52 Hinet Chunghwa Telecom Co., Ltd
184.108.40.206 - 220.127.116.11 hinet.net Chunghwa Telecom Co.,Ltd
18.104.22.168 - 22.214.171.124 Hinet Chunghwa Telecom Co., Ltd
126.96.36.199 - 188.8.131.52 Hinet Data Communication Business Group .tw
184.108.40.206 - 220.127.116.11 Hinet Data Communication Business Group .tw
18.104.22.168 - 22.214.171.124 Hinet Chunghwa Telecom Co.,Ltd.
126.96.36.199 - 188.8.131.52 Hinet Chunghwa Telecom Co.,Ltd.
184.108.40.206 - 220.127.116.11 Hinet Chunghwa Telecom Co.,Ltd.
but I suspect that list is far from complete.
Quote:>Is there a way to find out what IP blocks have been set aside for
Be careful, because there are two entities using the 'hinet' character
string - one is Chunghwa Telecom in Taiwan, the other is Hitachi Info
Systems in Japan - very different providers. Your best bet might be
to use your favorite search engine looking for block lists sorted
by companies. Taiwan has 396 IPv4 assignments/alocations, all from
APNIC, and the address ranges are not adjacent.