Please help improve this article by expanding it. Further information might be found on the talk page. (January 2008)

IP blocking prevents the connection between a server/website and certain IP addresses or ranges of addresses. IP blocking effectively bans undesired connections from those computers to a website, mail server, or other Internet server.

Unix-like operating systems commonly implement IP blocking using tcp wrappers, configured by host access control files^[1] /etc/hosts.deny and /etc/hosts.allow.

IP banning is commonly used on to protect against brute force attacks. Both companies and schools offering remote user access, and people wanting to access their home computers from remote locations, use Linux programs such as BlockHosts, DenyHosts or Fail2ban for protection from unauthorized access while allowing permitted remote access. It is also used for censorship.

On an Internet forum or Web site an IP ban is often used as a last resort to prevent a disruptive member from access, though a warning and/or account ban may be used first. Dynamic allocation of IP addresses can complicate incoming IP blocking, rendering it difficult to block a specific user without blocking a larger number of IP addresses, thereby risking collateral damage caused by ISPs sharing IP addresses of multiple internet users.

IP Blocking of the Showtime website for non-US origins

IP banning is also used to limit the syndication of content to a specific region. To achieve this IP-addresses are mapped to the countries they have been assigned to. This has been used to devastating effect most recently to target Nigerian IPs due to the perception that all business emanating from the country is fraudulent. Thus making it extremely difficult for legitimate businesses based in the country to interact with their counterparts in the rest of the world. To make purchases abroad, Nigerians rely on proxy companies to mediate transactions.^{[citation needed]}

Proxy servers can be used to bypass an IP ban unless the site being accessed has an effective anti-proxy script.

[edit] References

1. ^ HOSTS_ACCESS(5) FreeBSD man page. Wietse Venema.

[edit] See also

• Firewall
• PeerBlock
• PeerGuardian
• ProtoWall
• Fail2ban
• DenyHosts
• Denial-of-service attack
• Proxy server

[edit] External links

• Works related to IP blocking at Wikisource