From: "Sebastian Seemann" <MisterSeaman@gmx.de>
To: netfilter@vger.kernel.org
Subject: (unknown)
Date: Sat, 04 Oct 2008 13:20:00 +0200 [thread overview]
Message-ID: <20081004112000.258830@gmx.net> (raw)
In-Reply-To: <S1752389AbYJDKwq/20081004105246Z+121@vger.kernel.org>
Hi,
I would like to DROP all connections from IPs originating in a specified country. Of course, the geoip extension is a perfect fit for that. My question is what happens if I do this:
iptables -P INPUT DROP
iptables -A INPUT -m geoip ! --src-cc [country] -j ACCEPT
What happens if an IP is not found in the geoip-database, so it has no country-code at all? Is it accepted or not?
I would suppose it is accepted and, since I wanna be sure, would be thankful for a workaround simpler than adding every country in the world but the forbidden one.
Best Regards,
Sebastian
--
Psssst! Schon vom neuen GMX MultiMessenger gehört? Der kann`s mit allen: http://www.gmx.net/de/go/multimessenger
next parent reply other threads:[~2008-10-04 11:20 UTC|newest]
Thread overview: 19+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <S1752389AbYJDKwq/20081004105246Z+121@vger.kernel.org>
2008-10-04 11:20 ` Sebastian Seemann [this message]
2008-10-05 5:14 ` Grant Taylor
2008-10-05 5:53 ` Re: Grant Coady
2008-10-05 8:45 ` Re: Sebastian Seemann
2008-10-07 9:26 ` Re: Sebastian Seemann
2017-08-11 22:09 (unknown), Chris
-- strict thread matches above, loose matches on Subject: below --
2011-11-07 14:23 (unknown) Tarak Ranjan
2009-01-02 19:29 (unknown), Jorge Bastos - Decimal
2008-12-09 12:14 (unknown), Martin Spinassi
2008-10-31 7:14 (unknown), Jianqing Zhang
2008-07-27 1:11 (unknown), David Boulding
2008-03-07 8:06 (unknown) Alberto Díez
2008-01-11 12:31 (unknown), Videal ,)
2008-01-05 5:34 (unknown), Bikash Bhattarai
2008-01-03 21:57 (unknown), Joe Ruddy
2007-12-11 18:39 (unknown) Ryan Rodriguez
2007-11-15 5:24 (unknown), 李伟华
2007-09-21 22:33 (unknown), David Boulding
2007-09-15 23:15 (unknown) "Mario Hülsegge"
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20081004112000.258830@gmx.net \
--to=misterseaman@gmx.de \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox