You could use the Geoip db to generate an iptables list. Configserver.com has a method already that it uses for it's csf firewall. Perhaps you could pull it's method. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://nginx.org/pipermail/nginx/attachments/20090829/6370af91/attachment.html>