dan78
February 6, 2023, 9:47pm
1
Hello,
I am looking to integrate into a GUI an IP geo-blocking option.
Using an image like above in the GUI, an end user could click on the country and/or countries they would like to block traffic from.
Recognise there are some challenges with IPV6 and the use of VPN's.
Is anyone aware of packages they may have this functionality or suggestions on best way to implement.
1 Like
Lucky1
February 7, 2023, 9:37am
2
you can use iptgeoip in version v21
it's not realy GUI tho
I use this & it works well for limiting access incoming & out
I have blocked devices via MAC addresses they can't access RU or CN as an example
with both ipv6 & ipv4
not compatible with v22 with the new firewall as I know of yet tho
1 Like
could probably use the baniP package for this, with an ipset for each region and/or country,
but it won't be as pretty as a world map.
unfortunately I think banip have the same issue as the solution proposed by @Lucky1 , it's
not 100% ready for 22.03, yet.
after sysupgrade (2203) I got this
config banip 'global'
option ban_enabled '1'
option ban_debug '1'
option ban_autodetect '1'
option ban_autoblocklist '1'
option ban_autoallowlist '1'
option ban_nicelimit '0'
option ban_filelimit '1024'
option ban_loglimit '100'
option ban_logcount '1'
option ban_loginput '1'
option ban_logforward '0'
option ban_protov4 '1'
option ban_protov6 '1'
lis…
1 Like
yes you can see my post or i speak to same thing
hello I am looking for a developer to create a map of the world in luci, a map that we could install in statistic or netdata, and see the ips that we block by example in traffic rules do you think this is possible, example I block 10 ip addresses and I see which ones are blocked in the map of luci statitics in real time,
thanks for all work everybody