pfBlockerNG / pfBlockerNG-devel v3.2.0_3 - pfSense 2.6 Only

[ncm-com]

We have a function to filter traffic by specific country does this still exist?

[SteveITS]

@ncm-com yes.

[ncm-com]

@steveits I have version 3.2.0_3 and only following option available

[Gertjan]

@ncm-com

These are the world regions available.
Which is the one your are missing ?

Btw : do you host services like a web or mail server behind your pfSense ?

edit : if not, then this is the best setting :

as they will all hit the only and perfect WAN firewall rule : "block all".
There is no need to put a rule above that final block all rule that says : you are blocked.

[ncm-com]

@gertjan Yes I have a web service, but before the update, I can filter what countries I can allow to enter my web server rather than a continent, I'm looking for that function

[SteveITS]

@ncm-com on the IPv4 tab you can create an alias using whatever countries you wish.

[ncm-com]

@steveits so if I deny all locations on GeoIP and allow one country on IPv4 it will overrule? let's say I need to add only a few countries to the allowed list.

[the other]

@ncm-com
Hey there,
I would just pick those allowed countries, place that before default deny all, done.

[ncm-com]

This post is deleted!

[SteveITS]

@ncm-com said in pfBlockerNG / pfBlockerNG-devel v3.2.0_3 - pfSense 2.6 Only:

@steveits so if I deny all locations on GeoIP and allow one country on IPv4 it will overrule? let's say I need to add only a few countries to the allowed list.

On the Geo page use Alias Native and it will create an alias. You can then create your own rules in the order you wish.