can i restrict access to be only from my country IP range

engomar

Dears,

can i have a way to can i restrict access to be only from my country IP range. all other IPs will be dropped?

BR

chpalmer

@engomar Yes! But question.. Are you running some kind of services that need open ports? If not then everything is blocked by the firewall from outside by default..

Otherwise look up the PFBlocker package.

engomar

@chpalmer how I can do this task?

SteveITS

@engomar from memory….

You will need a free MaxMind account. See link and MaxMind fields in pfBlocker.

Run one update in pfBlocker to download country data.

On the IPv4 tab create a GeoIP entry. Use type Alias Native which does not create a rule.

Create your own rule or NAT rule with your country alias.

johnpoz

@SteveITS ^ exactly, I do this for services I share to the internet.. Works great.