Downloaded and updates IPtables based on Geo IP lists and country.
Works with both 'block country' and 'allow only' country modes.
IP block rules from:
- IPv4: http://www.ipdeny.com/ipblocks/data/aggregated/
- IPv6: http://www.ipdeny.com/ipv6/ipaddresses/aggregated/
Simply match the 'country code' to the country characters at the start of the {countrycode}-aggredated.zone file
NAME:
geowall - GeoIP Based Firewall
USAGE:
main [global options] command [command options] [arguments...]
AUTHOR:
Matt Spurrier <[email protected]>
COMMANDS:
apply
unload
help, h Shows a list of commands or help for one command
GLOBAL OPTIONS:
--v4, -4, --ipv4 Include IPv4 Rules
--v6, -6, --ipv6 Include IPv6 Rules
--iface value, -i value Inbound Interface
--save, -s Save IPTables Rules
--help, -h show help
--version, -v print the version
COPYRIGHT:
(c) 2021 Matt Spurrier
For example, to only allow AU IP's to the server on eth0 and block everything else, use:
geowall -4 -6 -i eth0 apply -c au -m allow
This will download and process: http://www.ipdeny.com/ipblocks/data/aggregated/au-aggregated.zone to IPTables http://www.ipdeny.com/ipv6/ipaddresses/aggregated/au-aggregated.zone to IP6Tables
To unload IPv4 and IPv6 rules on eth0 run:
geowall -4 -6 -i eth0 unload
To allow only AU and NZ IP's and block everything else on both IPv4 and IPv6, use:
geowall -4 -6 -i eth0 apply -c au,nz -m allow
To block a specific country on both IPv4 and IPv6, use:
geowall -4 -6 -i eth0 apply -c {countrycode} -m deny
To update rules for IPv4 to use AU and NZ use - this will clear existing rules and replace with AU and NZ:
geowall -4 -i eth0 apply -c au,nz
To allow only AU and NZ IP's and block everything else on both IPv4 and IPv6 and save the rules use:
geowall -4 -6 -i eth0 -s apply -c au,nz -m allow
To build this application: Requires Golang 1.11.1
go get -u github.com/digitalsparky/geowall
Would you like to buy me a coffee or send me a tip? While it's not expected, I would really appreciate it.
