Allowing network access only to US subnets

Is there a way to allow access to my network only from specific US subnets?  Is there some kind of list or at least some software or hardware device that will enable me to maintain an IP address access list so my website/FTP site can't be accessed from any IP address other than a US based address?  My router only has the ability to block/allow up to 10 or 20 address ranges so I may need another solution.  Any help will be greatly appreciated!
mbbuechlerAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
SunBowConnect With a Mentor Commented:
No. And the list or ".us" is a larger set than only Con_us. Still, better to disable all, then reenable as used.

Where most of what you want blocked is based upon a port or two, those can easily be easilt blocked. Block all the FTP traffic, for example. You can also move server back a step to alternative subnet.
0
 
mbbuechlerAuthor Commented:
OK, this is interesting and very helpful.  However, I think I need a bit more help to utilize this database.  I'm assuming I can't use my router (a D-Link DGL-4300) to reference this list.  Is there a router that can use ad-hoc IP address lists for blocking subnets?  (I need an actual hardware solution)  Or, is there a way (at least) to use some software on my server to prevent access to services like FTP, IIS, etc. using this database?
0
Worried about phishing attacks?

90% of attacks start with a phish. It’s critical that IT admins and MSSPs have the right security in place to protect their end users from these phishing attacks. Check out our latest feature brief for tips and tricks to keep your employees off a hackers line!

 
naveen_b81Commented:
any cisco router will be able to block you to specific ip addresses/ subnets. or any router with firewall capabilities can do the blocking. I am not sure whether your DLINK model has that capability.
0
 
mbbuechlerAuthor Commented:
Well, my router supports this but has a limit of 20 entries in the database I think - not nearly enough to allow only ALL U.S. subnets.  I'm looking for a solution that will allow hundreds of entries and that will be easy to maintain by allowing a global update of the allow/block lists.  Does something like that exist?
0
 
mbbuechlerAuthor Commented:
SunBow - that's the answer I was looking for.  Thanks for the feedback.  Also, thanks to PowerIT for the great information!  I'll be splitting points on this one - thanks again!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.