banIP Feed Recommendations and Region Blocking

Installing and Using OpenWrt
1

Two Questions:

  1. What banIP feed lists do you recommend? I am following the README advice and enabled (cinsscore,debl, and turris). I am on 256MB and have some room for more.

image
image1189×1226 160 KB

  1. I'd like to block all regions but ARIN, but I dont see how to enable 'Regional Internet Registry' selections in the WAN-Input/WAN-Forward selection. Am I missing something?

image
image1098×613 66.4 KB

config banip 'global'
        option ban_enabled '1'
        option ban_debug '0'
        option ban_autodetect '1'
        list ban_logterm 'Exit before auth from'
        list ban_logterm 'luci: failed login'
        option ban_protov4 '1'
        option ban_protov6 '1'
        list ban_ifv4 'wwan'
        list ban_ifv6 'wan'
        list ban_ifv6 'wan6'
        list ban_ifv6 'wwan'
        option ban_fetchretry '5'
        option ban_nicelimit '0'
        option ban_filelimit '1024'
        option ban_cores '1'
        option ban_splitsize '1024'
        option ban_deduplicate '1'
        option ban_reportelements '0'
        option ban_nftpriority '-100'
        option ban_icmplimit '10'
        option ban_synlimit '10'
        option ban_udplimit '100'
        option ban_nftpolicy 'memory'
        option ban_blocktype 'drop'
        option ban_nftloglevel 'warn'
        option ban_logprerouting '0'
        option ban_loginput '0'
        option ban_logforwardwan '0'
        option ban_logforwardlan '0'
        option ban_loglimit '100'
        option ban_autoallowlist '1'
        option ban_autoallowuplink 'subnet'
        option ban_autoblocklist '1'
        option ban_allowlistonly '0'
        option ban_fetchcmd 'uclient-fetch'
        list ban_trigger 'wan'
        list ban_trigger 'wan6'
        list ban_trigger 'wwan'
        list ban_dev 'phy0-sta0'
        list ban_blockinput 'cinsscore'
        list ban_blockinput 'debl'
        list ban_blockinput 'turris'
        list ban_blockforwardwan 'cinsscore'
        list ban_blockforwardwan 'debl'
        list ban_blockforwardwan 'turris'
        list ban_region 'AFRINIC'
        list ban_region 'APNIC'
        list ban_region 'LACNIC'
        list ban_region 'RIPE'
1 Like
2

This forum server is in RIPE region. If you change your mind,

Please connect to your OpenWrt device using ssh and copy the output of the following commands and post it here using the "Preformatted text </> " button:
grafik
Remember to redact passwords, MAC addresses and any public IP addresses you may have:

ubus call system board
cat /etc/config/network
cat /etc/config/wireless
cat /etc/config/dhcp
cat /etc/config/firewall
3

Disclaimer: This setup will blow your routers memory (256 MB)!
However, to achieve your goal, simply activate the country feed and also restrict this feed to WAN input and WAN forward.