How to block Geo IPs for some services?

[clonesheep]

Hi,

i have a ssh Service connected via the internet.

But i would like to filter a bit, because there comes often automatical scans from china IPs and so on.

The devices who connect to the port 22 have a dynamic ip so i cant set a static source.

But i know that these connections comes all from france dynamic ip adresses.

So how can i configure it, that there is a allow france ips and block other country ips?

[reaper · Accepted solution]

you can either set your inbound allow policy to only allow addresses in france, or create a block policy that blocks all countries you do not want connecting to you

[OtakarKlier]

Hello,

The other option is to just whitelist known good IPs you would like to connect from. There are many compromised systems even within a good country, i.e. US.

Regards,

[clonesheep]

Hey wow thats so easy.. thx.

I have no static IPs so i cant whitelist the good IPs.

Reapers made my day.