Block: Russian & Belarus IPs

bradf1405

HOW TO BLOCK RUSSIAN & BELARUS IP ADDRESSES

If you want to block Russian & Belarus IPs on your pfSense Firewall, follow these simple instructions:

Create an IP Alias with Russian_Belarus_IPs see attached file Russian_Belarus_IPs.txt
Create either a Floating Firewall Rule or a WAN Firewall Rule to Block incoming Russian_Belarus_IPs. Don't forget to set protocol to ANY.

I used a Floating Rule using Block, "Quick", Direction "Both Ways", Protocol "ANY" and using Russian_Belarus_IPs Alias as the source IP addresses. You could do the same with a WAN Ingress Block Firewall Rule. You could also add a LAN outgoing Block Rule so you can't also get out to any Russian/Belarus websites to just be extra secure.

Enjoy and stay safe!
Brad Francis.

bingo600

@bradf1405
That's 9.5 /16 = 622592 IP's

I would have expected more ip's allocated to them

/Bingo

pyrodex

@bingo600 said in Block: Russian & Belarus IPs:

@bradf1405
That's 9.5 /16 = 622592 IP's

I would have expected more ip's allocated to them

/Bingo

It is WAY too small, check out https://www.countryipblocks.net/acl.php

You can create an importable Alias list and select countries. I just wish they summarized it more where possible.

Update: Using https://raw.githubusercontent.com/grelleum/supernets/master/supernets.py gets it down to 8000ish subnets which is way more manageable.

bingo600

@pyrodex
I got 8010 CIDR subnets when optimizing with the supernet (from 22K)

Nice links

But remember ...
The bad guyzz do know how2 order a VPS in another country.
And i suppose they also know what a VPN is.

/Bingo

johnpoz

@bradf1405 you could also just use pfblocker

crucialguy

@johnpoz second this.

Best method to do blocking of this nature, you don't have to fiddle around worrying about keeping it up to date either as PfBlocker will check those lists for you.

Get pfblocker, sign up to MaxMind and away you go. Automated and dynamic, exactly how networking should be!