Enterprise Internet - Question
Jimmy Hess
mysidia at gmail.com
Fri Jul 15 02:00:49 UTC 2011
On Thu, Jul 14, 2011 at 2:34 PM, Jeff Cartier
<Jeff.Cartier at pernod-ricard.com> wrote:
> - How should/can an enterprise deal with accessibility to internet content issues? (ie. that whole coming from a Canadian IP accessing US content)
You indeed might feed traffic towards such "IP restricted" sites
through a transparent proxy server,
or policy NAT based on destination IP, reducing all traffic towards
those sites from "canadian"
ranges, to a pool of source IP addresses.
Just to take a jab at absurd "content restriction" by IP methods, a reminder...
There's no such thing as a "US" IP address. There's no such thing as
a Canadian IP address.
There are IPs delegated to network operators who have an AS in certain
countries,
but that is no proof of country of origin.
What "country" is an IP address located in when it is assigned to a
terminal server, VPN server,
or proxy server in country $X, and there are authorized users that connect
from 16 different countries?
--
-JH
More information about the NANOG
mailing list