Comments on: CIDR Zone file merging for higher performance

By: IT_Architect

IT_Architect — Thu, 16 Dec 2010 23:05:09 +0000

@T Hackque
I don’t know Perl. Can I use this script to compress IP addresses by calling it with a file name from the command line or….

Thanks!

David Picard — Tue, 03 Aug 2010 12:32:06 +0000

I have made significant modifications to a script initially posted by Vivek Gite at http://www.cyberciti.biz/faq/block-entier-country-using-iptables to address the performance issues and cache the zone updates from ipdeny for an iptables based firewall. The rationale for the changes and the altered script is available at http://psind.com/blog/2010/07/31/targeted-ip-blocking-align-web-services-to-your-target-markets/

T Hackque — Mon, 02 Aug 2010 14:01:18 +0000

Umm, your blog software seems to have removed a few crucial characters, let’s ty this:

#!/usr/bin/perl

use strict;
use warnings;

use NetAddr::IP;

my @addresses = ();

while( ) {
chomp;
s/\s*#.*$//;

next if( !length );

push @addresses, NetAddr::IP->new( $_ );
}

exit unless( @addresses );

#print STDERR ( (scalar @addresses), ” addresses input, ” );

@addresses = NetAddr::IP::Compact(@addresses);
#print STDERR ( (scalar @addresses), ” addresses output\n” );

print join( “\n”, @addresses ), “\n”;

exit;