There is an internet plan in my ISP that allows only Facebook, and because Facebook uses Akamai it is included also. So any server that belongs to Akamai can be accessed. How does the firewall know all the servers of Akamai because requesting the IP address of the server works fine, so it's not based on domain name.

I did a little searching Firewall defined Akamai IP Range

and I found out that it is not possible to know all the servers, so any theories and how can I confirm it?

  • Akamai wouldn't tell the person that asked that question - but I'm sure they'd tell commercial partners. – paj28 Oct 15 '16 at 16:07

In most cases people gather lists of big companies IP address ranges from their BGP AS numbers which are associated with ranges of IP addresses. A quick search at a public BGP AS looking glass reveals many lists for Akamai IP addresses these can then be aggregated and blocked by your firewall.

This technique usually won't work for smaller companies as they are less likely to use BGP. It also has many limitations in that a company may host servers on another companies network (think cloud compute services) and those servers will not show up under the companies BGP AS IP ranges. None the less, for blocking access to large well-known services this is an easy way to find a companies IP address ranges.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.