> afaik all you can do to block an entire country is drop all the ip > blocks assigned to them, which will be tedious. > For instance here is a list of the blocks for Belgium: > http://www.nirsoft.net/countryip/be.html > > -Joris > Thanks for the link ... just for fun I added China and Belgium to iptables and those 2 countries's ip address range/blocks added 20866 lines to iptables ... Now just imagine if I had to add Russia, Bangkok etc ... :) ...