i read some time the discussion about IP blocking based on Country.
Also there are some postitive Arguments for this idee. I personly think
that an include of this feature is
- Extereme overload for IP-tables since it need extreme large table of ip lists
- Is extreme faulty since IP's are not original assinged to country but locations like Europe.
- Political / Programming aspects. The kernel and iptables contain technical part wich mean
plock an port, ip , range based on time flages etc.. It never contained Localisation like different languages for
error reports and never country based selections.
- How you wan't to do the next step someone say i not wan't to select based on country bot wan't different web server
for region's with different main language. ASIA -> UTF8/Chinese Europe Latin1/Frensh,German,English America => Spain/english
there are many god ground for large selection map but NONE OF THEM is good enaught to include such maps in the kernel or iptables.
Cu Thomas