topic How to block Geo IPs for some services? in General Topics

How to block Geo IPs for some services?

clonesheep — Mon, 26 Feb 2018 09:56:08 GMT

Hi,

i have a ssh Service connected via the internet.

But i would like to filter a bit, because there comes often automatical scans from china IPs and so on.

The devices who connect to the port 22 have a dynamic ip so i cant set a static source.

But i know that these connections comes all from france dynamic ip adresses.

So how can i configure it, that there is a allow france ips and block other country ips?

Re: How to block Geo IPs for some services?

reaper — Mon, 26 Feb 2018 11:53:07 GMT

you can either set your inbound allow policy to only allow addresses in france, or create a block policy that blocks all countries you do not want connecting to you

Re: How to block Geo IPs for some services?

OtakarKlier — Mon, 26 Feb 2018 14:39:02 GMT

Hello,

The other option is to just whitelist known good IPs you would like to connect from. There are many compromised systems even within a good country, i.e. US.

Regards,

Re: How to block Geo IPs for some services?

clonesheep — Mon, 26 Feb 2018 16:31:50 GMT

Hey wow thats so easy.. thx.

I have no static IPs so i cant whitelist the good IPs.

Reapers made my day.