block access from certain countries or IPs

[frog]

Is it possible to block certain countries from connecting to the openvpn server on PFSense+
If so, how please.
thx

Chris

[AndyRH]

pfBlocker will do what you need. There are plenty of documents on how to do it.
Mostly you install pfBlocker and chose the block lists that meet your needs.
Expect a few hours of learning that is well worth the time.

[johnpoz]

@frog yeah you can create aliases with pfblocker and then only allow what is in the alias to connect. I would go more for allow vs block, because normally this is a much smaller list vs trying to block the planet.

But if you just want to block a couple of countries and allow the rest then sure block vs allow.

For example - I currently allow only the US and a few specific IP ranges that might not be US to access any of my services I expose. But if you wanted to allow everyone other than say mexico ;) then that list would be smaller and would be better to block vs allow.