How to block traffic country-wise?

How to block traffic country-wise?

[Dirk]

Hello,
I want to write a firewall that can block traffic from specific
countries using GeoIP.dat.

I downloaded libnetfilter_queue because I think it can do what I want.

1) Get IP of connection
2) Check local GeoIP database
3) Refuse or Allow connection

But the included examples don't work. Maybe I'm completely wrong by
starting with libnetfilter_queue or the included example?

Can someone give me a hint, example, snippet or link?

Thanks,
Dirk

Re: How to block traffic country-wise?

[Samuel Jean]

On Fri, 2006-26-05 at 23:54 +0200, Dirk wrote:
> Hello,
> I want to write a firewall that can block traffic from specific
> countries using GeoIP.dat.

There is the geoip match module for iptables.

> Can someone give me a hint, example, snippet or link?

There is the PoM module:
http://people.netfilter.org/~peejix/patchlets/

Krzysztof Olędzki patch for linux 2.6.16.x:
https://lists.netfilter.org/pipermail/netfilter-devel/2006-May/024303.html

There is the howto:
http://people.netfilter.org/~peejix/geoip/howto/geoip-HOWTO.html

HTH,
--peejix