From: "Walter Dnes" <waltdnes@waltdnes.org>
To: gentoo-user@lists.gentoo.org
Subject: Re: [gentoo-user] IPTABLES syntax change?
Date: Sun, 6 Jan 2013 16:54:50 -0500 [thread overview]
Message-ID: <20130106215450.GB21848@waltdnes.org> (raw)
In-Reply-To: <201301051157.21464.michaelkintzios@gmail.com>
On Sat, Jan 05, 2013 at 11:57:10AM +0000, Mick wrote
>
> It will, but only partially. It seems that the list is long and it
> is getting longer and longer! Check this out:
>
> whois -h whois.radb.net -- '-i origin AS32934' | grep ^route
>
> (as advised by https://developers.facebook.com/docs/ApplicationSecurity/)
<ELVIS> Thank you, Thank you, Thank you verrry verrry much </ELVIS>
It's not as bad as it looks, because...
a) there's a lot of duplication
b) many of the blocks are subsets with a bigger Facebook block
31.13.24.0/21
inetnum: 31.13.24.0 - 31.13.31.255
netname: IE-FACEBOOK-20110418
descr: Facebook Ireland Ltd
country: IE
31.13.64.0/18
31.13.64.0/19
31.13.64.0/24
31.13.65.0/24
31.13.66.0/24
31.13.67.0/24
31.13.68.0/24
31.13.69.0/24
31.13.70.0/24
31.13.71.0/24
31.13.72.0/24
31.13.73.0/24
31.13.74.0/24
31.13.75.0/24
31.13.76.0/24
31.13.77.0/24
31.13.78.0/24
31.13.79.0/24
31.13.80.0/24
31.13.82.0/24
31.13.83.0/24
31.13.84.0/24
31.13.85.0/24
31.13.86.0/24
31.13.87.0/24
31.13.88.0/24
31.13.89.0/24
31.13.90.0/24
31.13.91.0/24
31.13.92.0/24
31.13.93.0/24
31.13.94.0/24
31.13.95.0/24
31.13.96.0/19
inetnum: 31.13.64.0 - 31.13.127.255
netname: IE-FACEBOOK-20110418
descr: Facebook Ireland Ltd
country: IE
66.220.144.0/20
66.220.144.0/20
66.220.144.0/21
66.220.152.0/21
66.220.159.0/24
NetRange: 66.220.144.0 - 66.220.159.255
CIDR: 66.220.144.0/20
OrgName: Facebook, Inc.
OrgId: THEFA-3
69.63.176.0/20
69.63.176.0/20
69.63.176.0/20
69.63.176.0/21
69.63.176.0/21
69.63.176.0/24
69.63.178.0/24
69.63.184.0/21
69.63.184.0/21
69.63.186.0/24
NetRange: 69.63.176.0 - 69.63.191.255
CIDR: 69.63.176.0/20
OrgName: Facebook, Inc.
OrgId: THEFA-3
69.171.224.0/19
69.171.224.0/20
69.171.239.0/24
69.171.240.0/20
69.171.253.0/24
69.171.255.0/24
NetRange: 69.171.224.0 - 69.171.255.255
CIDR: 69.171.224.0/19
OrgName: Facebook, Inc.
OrgId: THEFA-3
74.119.76.0/22
NetRange: 74.119.76.0 - 74.119.79.255
CIDR: 74.119.76.0/22
OrgName: Facebook, Inc.
OrgId: THEFA-3
103.4.96.0/22
inetnum: 103.4.96.0 - 103.4.99.255
netname: FACEBOOK-SG
173.252.64.0/18
173.252.64.0/19
173.252.70.0/24
173.252.96.0/19
NetRange: 173.252.64.0 - 173.252.127.255
CIDR: 173.252.64.0/18
OriginAS: AS32934
NetName: FACEBOOK-INC
204.15.20.0/22
204.15.20.0/22
NetRange: 204.15.20.0 - 204.15.23.255
CIDR: 204.15.20.0/22
OrgName: Facebook, Inc.
OrgId: THEFA-3
A grand total of 9 IPV4 ranges, of which I already have 6. Time for a
minor update. Thanks again for the whois lookup command.
> BTW, websites may break if you block all these ip ranges.
<LENNART> It's their fault that they're broken, not mine </LENNART>
--
Walter Dnes <waltdnes@waltdnes.org>
I don't run "desktop environments"; I run useful applications
prev parent reply other threads:[~2013-01-06 21:57 UTC|newest]
Thread overview: 27+ messages / expand[flat|nested] mbox.gz Atom feed top
2012-12-27 0:47 [gentoo-user] IPTABLES syntax change? Walter Dnes
2012-12-27 1:43 ` Michael Orlitzky
2012-12-27 11:28 ` Graham Murray
2012-12-27 16:36 ` Michael Orlitzky
2012-12-27 17:52 ` Matthias Hanft
2012-12-27 19:04 ` Michael Orlitzky
2012-12-27 23:11 ` Walter Dnes
2012-12-27 23:50 ` Michael Orlitzky
2012-12-28 3:59 ` Walter Dnes
2012-12-28 6:07 ` Michael Orlitzky
2012-12-28 6:15 ` Michael Orlitzky
2012-12-29 2:46 ` Walter Dnes
2012-12-29 3:59 ` Kerin Millar
2012-12-29 18:32 ` Walter Dnes
2012-12-29 18:49 ` Jarry
2012-12-30 22:42 ` Michael Orlitzky
2012-12-31 2:55 ` Adam Carter
2012-12-31 3:21 ` Walter Dnes
2013-01-02 21:36 ` Michael Orlitzky
2013-01-03 3:57 ` Pandu Poluan
2013-01-03 4:32 ` Michael Orlitzky
2013-01-04 20:17 ` Walter Dnes
2013-01-04 20:27 ` Michael Mol
2013-01-05 1:29 ` Walter Dnes
2013-01-05 3:26 ` Michael Mol
2013-01-05 11:57 ` Mick
2013-01-06 21:54 ` Walter Dnes [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20130106215450.GB21848@waltdnes.org \
--to=waltdnes@waltdnes.org \
--cc=gentoo-user@lists.gentoo.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox