Comments on: iptables geoip match on debian lenny

By: My TOR exit node experience trying to filter out noisy traffic at Playhouse of privacy, security, hacking, encryption, intelligence and some business stuff

Mon, 24 Jan 2011 21:14:41 +0000

[...] and polite way a Country Exit Policy for TOR exit node, so i decided to go the dirty way by using iptables/geoip . After fighting to make it compile properly it was one line of [...]

By: Iptables block host

Iptables block host — Sat, 27 Nov 2010 02:24:29 +0000

[...] Here’s a tutorial for Debian 5.0. August 26, 2010 11:23 am Sergio Galvan In blogama you can pick the country you’d like to block. (i.e) [...]

By: Blocking countries from accessing my server?

Blocking countries from accessing my server? — Thu, 03 Jun 2010 17:26:38 +0000

[...] Why not .. there is geoip iptables module here is a very good tutorial http://www.ducea.com/2009/03/18/ipta…-debian-lenny/ [...]

By: j.eng

j.eng — Sun, 28 Feb 2010 16:56:18 +0000

A visitor client generally does not send any information about its timezone, so there is nothing that you could match in the first place.

By: - Marius -

- Marius - — Thu, 11 Feb 2010 19:03:37 +0000

@gopi; I doubt it. I am not even aware of such a functionality in any library that could expose that info to iptables.

By: gopi

gopi — Thu, 11 Feb 2010 11:42:47 +0000

does any feature exits to get the time-zone of the client machine/visitor?

By: - Marius -

- Marius - — Thu, 30 Apr 2009 13:34:13 +0000

@Dave that’s correct, thanks for mentioning it. I’ve done the same

By: Dave

Dave — Mon, 20 Apr 2009 16:50:47 +0000

Just an aside, as of v1.13 of xtables-addons, they require iptables 1.4.3, Lenny uses 1.4.2. I chose to use 1.12 of xtables-addons, so far all appears to be working.

By: Anshin

Anshin — Thu, 16 Apr 2009 08:57:56 +0000

Great! I could use this howto flawlessly even on my Gentoo system, I just grabbed an experimental ebuild instead of manually compiling the xtables-addons.
Much neater than patch-o-matic especially in that you do not need to patch the kernel and you do not even need a reboot!

By: Dave

Dave — Tue, 07 Apr 2009 01:28:19 +0000

Thanks for this. Been fighting kernel+iptables+patch(es) compiling for a couple of days now.