<![CDATA[Default action setting?]]>Is there a default action setting? I only saw this note after I already did it:

It's also not recommended to block the 'world', instead consider rules to 'Permit' traffic from selected Countries only.

I only did it that way because I didn't see a default action setting.

]]>https://forum.netgate.com/topic/166521/default-action-settingRSS for NodeTue, 13 Oct 2026 22:49:00 GMTTue, 14 Sep 2021 00:09:24 GMT60<![CDATA[Reply to Default action setting? on Tue, 14 Sep 2021 21:16:00 GMT]]>@peterlecki I am not sure I understand completely but when you create a geo list the default is Disabled, it says so next to the List Action dropdown.

The point of the comment is that instead of creating IP tables in memory to block 95% of the world, make a default block rule and only allow 5% of the world.

Often what I do is make the list Alias Native which only creates an alias. Then I can use that alias in whatever NAT rule or firewall rule I want.

]]>https://forum.netgate.com/post/1001553https://forum.netgate.com/post/1001553Tue, 14 Sep 2021 21:16:00 GMT<![CDATA[Reply to Default action setting? on Tue, 14 Sep 2021 19:40:59 GMT]]>ping

]]>https://forum.netgate.com/post/1001544https://forum.netgate.com/post/1001544Tue, 14 Sep 2021 19:40:59 GMT