GeoIP needs a kernel module that it’s not available if using the nDPI kernel.
If you reboot and select CentOS kernel you will we able to use GeoIP, but you’ll loose nDPI.
ah, okay, thought if it comes directly from iptables it is like other rules there. thanks again for your quick answer