NSecurity 8 - GEOIP Blocking

[Shadowfire (Jeff Davis)]

@giacomo

Does Nethsecure 8 have GEOIP Blocking?

[filippo_carletti]

Yes, threat shield has a database of countries and you can select which country to block.
Rough configuration guide to block Italy:

uci add_list banip.global.ban_feed='country'
uci add_list banip.global.ban_country='it'
uci commit
/etc/init.d/banip reload

[Shadowfire (Jeff Davis)]

Ok. That is good to know. Is there a current way to set this in GUI, or will there be a GUI configuration page planned for NethSecurity for this and others configurations of Threat shield and Threat DNS?

[MadPatrick]

Would be great lto have this function in the GUI

[giacomo (Giacomo Sanchietti)]

@Shadowfire

Is there a current way to set this in GUI, or will there be a GUI configuration page planned

@MadPatrick

Would be great lto have this function in the GUI

Probably we will have a UI for it, but I’m not sure it will be in near future.

[Deckard (D. D.)]

Hi,

has this gotten into the GUI? I am sometimes blind, but I don’t see it. It would be great. =)

BTW: “country” is the ISO-3166-1 code of the country name or the TLD?

[giacomo (Giacomo Sanchietti)]

Yep, it’s coming on NethSecurity 8.8.0: UI support for Geo IP management in Threat Shield IP · Issue #1586 · NethServer/nethsecurity · GitHub

A beta should be ready soon.