How to block DDoS attack according geolocation?

[noviko01]

Is there posibilities how to block DDoS attack according public IPs geolocation?

For example block all IPs from some country for DDoS attack (or other brute force) but allow for correct data communication (http).

Thanks

[mikand]

The tricky part is that a proper DDoS will flood your incoming lines no matter what you do.

The DoS protection available is just so the box itself doesnt suffer (or systems behind your PA) but the uplink might be dead anyway...

[noviko01]

Yes basically agree. But in some case not full flood. For example enough line bandwidth and slow attack. I cannot argue with this.

Some other vendors like Radware have some solution but all is open question.

Primary question was how to block according geolocation.

How to set is clear but some your experiences, examples recomendation with this?

Thank you.