Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Code Project
  1. Home
  2. The Lounge
  3. Any utility in limiting access of a web app to a country?

Any utility in limiting access of a web app to a country?

Scheduled Pinned Locked Moved The Lounge
toolsquestion
25 Posts 11 Posters 0 Views 1 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • K Offline
    K Offline
    kmg365
    wrote on last edited by
    #1

    Web application has no use outside of US. I'm thinking of getting a firewall rule in place to restrict it to just US access. Couldn't hurt to reduce attack surface I'm thinking, and it doesn't cost me anything [assumption]. Any utility in doing this?

    "Sanity is not statistical." - Eric Blair, 1984, Chapter 9

    W M Richard DeemingR L M 6 Replies Last reply
    0
    • K kmg365

      Web application has no use outside of US. I'm thinking of getting a firewall rule in place to restrict it to just US access. Couldn't hurt to reduce attack surface I'm thinking, and it doesn't cost me anything [assumption]. Any utility in doing this?

      "Sanity is not statistical." - Eric Blair, 1984, Chapter 9

      W Offline
      W Offline
      wizardzz
      wrote on last edited by
      #2

      Will you be interested in stopping people that access it via proxy, or just the unwashed masses you'll catch over regular IP?

      Twits[^]

      K 1 Reply Last reply
      0
      • K kmg365

        Web application has no use outside of US. I'm thinking of getting a firewall rule in place to restrict it to just US access. Couldn't hurt to reduce attack surface I'm thinking, and it doesn't cost me anything [assumption]. Any utility in doing this?

        "Sanity is not statistical." - Eric Blair, 1984, Chapter 9

        M Offline
        M Offline
        Maximilien
        wrote on last edited by
        #3

        Why ? At least let us have a look at it, and after that, if there is something that is really localized, just block it at that level.

        Nihil obstat

        K 1 Reply Last reply
        0
        • W wizardzz

          Will you be interested in stopping people that access it via proxy, or just the unwashed masses you'll catch over regular IP?

          Twits[^]

          K Offline
          K Offline
          kmg365
          wrote on last edited by
          #4

          I don't think I can stop people using a proxy, in the special case of a DOS attack they would be limited to a proxy(s) or bots in the country of origin, and the logic of the firewall should also provide coverage. In the case of the "great unwashed" don't need to use it so why provide an access? Reducing attack surface is the goal.

          "Sanity is not statistical." - Eric Blair, 1984, Chapter 9

          1 Reply Last reply
          0
          • K kmg365

            Web application has no use outside of US. I'm thinking of getting a firewall rule in place to restrict it to just US access. Couldn't hurt to reduce attack surface I'm thinking, and it doesn't cost me anything [assumption]. Any utility in doing this?

            "Sanity is not statistical." - Eric Blair, 1984, Chapter 9

            Richard DeemingR Offline
            Richard DeemingR Offline
            Richard Deeming
            wrote on last edited by
            #5

            +1 for knowing there is an "outside of the US"! :)


            "These people looked deep within my soul and assigned me a number based on the order in which I joined." - Homer

            "These people looked deep within my soul and assigned me a number based on the order in which I joined" - Homer

            K G 2 Replies Last reply
            0
            • M Maximilien

              Why ? At least let us have a look at it, and after that, if there is something that is really localized, just block it at that level.

              Nihil obstat

              K Offline
              K Offline
              kmg365
              wrote on last edited by
              #6

              Why should anyone outside the audience area have a look at it if it doesn't pertain to them? What would that achieve for the person standing the app up, or for the audience it doesn't apply to?

              "Sanity is not statistical." - Eric Blair, 1984, Chapter 9

              1 Reply Last reply
              0
              • Richard DeemingR Richard Deeming

                +1 for knowing there is an "outside of the US"! :)


                "These people looked deep within my soul and assigned me a number based on the order in which I joined." - Homer

                K Offline
                K Offline
                kmg365
                wrote on last edited by
                #7

                Click.[^]

                "Sanity is not statistical." - Eric Blair, 1984, Chapter 9

                enhzflepE 1 Reply Last reply
                0
                • Richard DeemingR Richard Deeming

                  +1 for knowing there is an "outside of the US"! :)


                  "These people looked deep within my soul and assigned me a number based on the order in which I joined." - Homer

                  G Offline
                  G Offline
                  Garth J Lancaster
                  wrote on last edited by
                  #8

                  how do I vote '10' for that comment ? :-) you'll have to do with a '5', sorry

                  1 Reply Last reply
                  0
                  • K kmg365

                    Web application has no use outside of US. I'm thinking of getting a firewall rule in place to restrict it to just US access. Couldn't hurt to reduce attack surface I'm thinking, and it doesn't cost me anything [assumption]. Any utility in doing this?

                    "Sanity is not statistical." - Eric Blair, 1984, Chapter 9

                    L Offline
                    L Offline
                    Lost User
                    wrote on last edited by
                    #9

                    You might like to visit here and look at geoip ... http://www.maxmind.com/en/home[^]

                    K 1 Reply Last reply
                    0
                    • K kmg365

                      Web application has no use outside of US. I'm thinking of getting a firewall rule in place to restrict it to just US access. Couldn't hurt to reduce attack surface I'm thinking, and it doesn't cost me anything [assumption]. Any utility in doing this?

                      "Sanity is not statistical." - Eric Blair, 1984, Chapter 9

                      M Offline
                      M Offline
                      Mark_Wallace
                      wrote on last edited by
                      #10

                      Lemme guess, you're working on a fix for the problem of European countries complaining that the US government has been warehousing and processing information about their citizens. (The one thing the Lounge is missing is its own, internal conspiracy theory.)

                      I wanna be a eunuchs developer! Pass me a bread knife!

                      A 1 Reply Last reply
                      0
                      • M Mark_Wallace

                        Lemme guess, you're working on a fix for the problem of European countries complaining that the US government has been warehousing and processing information about their citizens. (The one thing the Lounge is missing is its own, internal conspiracy theory.)

                        I wanna be a eunuchs developer! Pass me a bread knife!

                        A Offline
                        A Offline
                        AspDotNetDev
                        wrote on last edited by
                        #11

                        Mark_Wallace wrote:

                        The one thing the Lounge is missing is its own, internal conspiracy theory

                        Why do you think message previews are sent to the server AJAX-style rather than just doing everything in JavaScript? Whenever somebody posts something he doesn't like, Maunder is notified of the post and

                        Thou mewling ill-breeding pignut!

                        A A 2 Replies Last reply
                        0
                        • A AspDotNetDev

                          Mark_Wallace wrote:

                          The one thing the Lounge is missing is its own, internal conspiracy theory

                          Why do you think message previews are sent to the server AJAX-style rather than just doing everything in JavaScript? Whenever somebody posts something he doesn't like, Maunder is notified of the post and

                          Thou mewling ill-breeding pignut!

                          A Offline
                          A Offline
                          AspDotNetDev
                          wrote on last edited by
                          #12

                          Dang you, Maunder! I just wanted to tell everybody that you

                          Thou mewling ill-breeding pignut!

                          M 1 Reply Last reply
                          0
                          • A AspDotNetDev

                            Dang you, Maunder! I just wanted to tell everybody that you

                            Thou mewling ill-breeding pignut!

                            M Offline
                            M Offline
                            Mark_Wallace
                            wrote on last edited by
                            #13

                            And there is is, brothers and sisters! Incontrovertible proof that Maunder is

                            I wanna be a eunuchs developer! Pass me a bread knife!

                            _ 1 Reply Last reply
                            0
                            • M Mark_Wallace

                              And there is is, brothers and sisters! Incontrovertible proof that Maunder is

                              I wanna be a eunuchs developer! Pass me a bread knife!

                              _ Offline
                              _ Offline
                              _Damian S_
                              wrote on last edited by
                              #14

                              Oh come on you pair, it's not like Chris is really

                              Quad skating his way through the world since the early 80's... Booger Mobile - My bright green 1964 Ford Falcon - check out the blog here!! | If you feel generous - make a donation to Camp Quality!!

                              1 Reply Last reply
                              0
                              • A AspDotNetDev

                                Mark_Wallace wrote:

                                The one thing the Lounge is missing is its own, internal conspiracy theory

                                Why do you think message previews are sent to the server AJAX-style rather than just doing everything in JavaScript? Whenever somebody posts something he doesn't like, Maunder is notified of the post and

                                Thou mewling ill-breeding pignut!

                                A Offline
                                A Offline
                                AlphaDeltaTheta
                                wrote on last edited by
                                #15

                                :confused: what?

                                enhzflepE 1 Reply Last reply
                                0
                                • K kmg365

                                  Web application has no use outside of US. I'm thinking of getting a firewall rule in place to restrict it to just US access. Couldn't hurt to reduce attack surface I'm thinking, and it doesn't cost me anything [assumption]. Any utility in doing this?

                                  "Sanity is not statistical." - Eric Blair, 1984, Chapter 9

                                  A Offline
                                  A Offline
                                  AlphaDeltaTheta
                                  wrote on last edited by
                                  #16

                                  Geocoding baby! :laugh:

                                  1 Reply Last reply
                                  0
                                  • A AlphaDeltaTheta

                                    :confused: what?

                                    enhzflepE Offline
                                    enhzflepE Offline
                                    enhzflep
                                    wrote on last edited by
                                    #17

                                    It's a joke mate. (I hate explaining them, almost as much as I hate seeing someone miss-out on a funny one) The inference is that Chris monitors all posts as they are made, NSA style. The posts were deliberately cut-off mid sentence as a way of saying "see, look - Chris even censored this post, he _must_ have the ability to monitor posts in real-time" :-D

                                    Make it work. Then do it better - Andrei Straut

                                    A 1 Reply Last reply
                                    0
                                    • K kmg365

                                      Click.[^]

                                      "Sanity is not statistical." - Eric Blair, 1984, Chapter 9

                                      enhzflepE Offline
                                      enhzflepE Offline
                                      enhzflep
                                      wrote on last edited by
                                      #18

                                      Haha ha ha ha ha ha. Not sure what was funnier - the picture or some of the responses to it. Biggest chuckle I've had all week.:thumbsup:

                                      Make it work. Then do it better - Andrei Straut

                                      1 Reply Last reply
                                      0
                                      • enhzflepE enhzflep

                                        It's a joke mate. (I hate explaining them, almost as much as I hate seeing someone miss-out on a funny one) The inference is that Chris monitors all posts as they are made, NSA style. The posts were deliberately cut-off mid sentence as a way of saying "see, look - Chris even censored this post, he _must_ have the ability to monitor posts in real-time" :-D

                                        Make it work. Then do it better - Andrei Straut

                                        A Offline
                                        A Offline
                                        AlphaDeltaTheta
                                        wrote on last edited by
                                        #19

                                        Of course I could understand the pun intended, but deliberately wanted to create a joke!

                                        enhzflepE 1 Reply Last reply
                                        0
                                        • A AlphaDeltaTheta

                                          Of course I could understand the pun intended, but deliberately wanted to create a joke!

                                          enhzflepE Offline
                                          enhzflepE Offline
                                          enhzflep
                                          wrote on last edited by
                                          #20

                                          Okaaay. Actually, there's no pun there.

                                          Google wrote:

                                          Pun: A joke exploiting the different possible meanings of a word or the fact that there are words that sound alike but have different meanings

                                          Protip: The confused icon, followed by "what?" just looks like you don't get it. ;P The miss-use of the word pun doesn't exactly help, either.

                                          Make it work. Then do it better - Andrei Straut

                                          A 1 Reply Last reply
                                          0
                                          Reply
                                          • Reply as topic
                                          Log in to reply
                                          • Oldest to Newest
                                          • Newest to Oldest
                                          • Most Votes


                                          • Login

                                          • Don't have an account? Register

                                          • Login or register to search.
                                          • First post
                                            Last post
                                          0
                                          • Categories
                                          • Recent
                                          • Tags
                                          • Popular
                                          • World
                                          • Users
                                          • Groups