Permit United States only for specific port on WAN interface
-
I am using pfBlockerNG-devel version 3.1.0.
Currently I have Geo IP blocking many countries on my WAN interface but all I really need to do for efficiency is protect one specific port number so that only the United States is permitted to it.
I am under the impression that I can create a Alias allow rule for my specific port but can't seem to figure out exactly how to do it.
How would I go about picking only the United States from Pfblocker's Geo IP and created an Alias just for this one country?
-
@mikej47 create alias and only put in the US.. here I use it in this alias of mine for my plex.. I have user in Morocco - but just just the US in yours
-
Ok, got it. And then for my one port - do I add my custom destination port when I am creating this or can I simply add this new IP/Geo IP list to the source of a firewall rule that already exists?
-
@mikej47 I would put your alias in the port forward, then it will auto create it in your associated rule
edit: here is mine for example
-
@johnpoz Thank you. This is a great feature. I like how I can get a lot more granular with my rules this way.
-
@johnpoz said in Permit United States only for specific port on WAN interface:
@mikej47 create alias and only put in the US.. here I use it in this alias of mine for my plex.. I have user in Morocco - but just just the US in yours
Hi @johnpoz :)
Could you please share the rest of your settings from that picture?
And what in the "Action" what are you using there?
-
@ciscox said in Permit United States only for specific port on WAN interface:
Could you please share the rest of your settings from that picture?
sure
I really only use pfblocker for alias management.. And then use those aliases in my rules manually..
-
@johnpoz said in Permit United States only for specific port on WAN interface:
@ciscox said in Permit United States only for specific port on WAN interface:
Could you please share the rest of your settings from that picture?
sure
I really only use pfblocker for alias management.. And then use those aliases in my rules manually..
Thank you very much @johnpoz :)
And what are your settings inside AllowPfb?
-
@ciscox its set to alias - which is shown on that first summary sort of page
-
@johnpoz said in Permit United States only for specific port on WAN interface:
@ciscox its set to alias - which is shown on that first summary sort of page
What the heck, I didn't know about this. This is going to make things much easier now :)
Thank you very much :)
