Skip to content

digitalsparky/geowall

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

36 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

GEOWall Build Status

Downloaded and updates IPtables based on Geo IP lists and country.

Works with both 'block country' and 'allow only' country modes.

IP block rules from:

Simply match the 'country code' to the country characters at the start of the {countrycode}-aggredated.zone file

NAME:
   geowall - GeoIP Based Firewall

USAGE:
   main [global options] command [command options] [arguments...]

AUTHOR:
   Matt Spurrier <[email protected]>

COMMANDS:
     apply
     unload
     help, h  Shows a list of commands or help for one command

GLOBAL OPTIONS:
   --v4, -4, --ipv4         Include IPv4 Rules
   --v6, -6, --ipv6         Include IPv6 Rules
   --iface value, -i value  Inbound Interface
   --save, -s               Save IPTables Rules
   --help, -h               show help
   --version, -v            print the version

COPYRIGHT:
   (c) 2021 Matt Spurrier

For example, to only allow AU IP's to the server on eth0 and block everything else, use:

geowall -4 -6 -i eth0 apply -c au -m allow

This will download and process: http://www.ipdeny.com/ipblocks/data/aggregated/au-aggregated.zone to IPTables http://www.ipdeny.com/ipv6/ipaddresses/aggregated/au-aggregated.zone to IP6Tables

To unload IPv4 and IPv6 rules on eth0 run:

geowall -4 -6 -i eth0 unload

To allow only AU and NZ IP's and block everything else on both IPv4 and IPv6, use:

geowall -4 -6 -i eth0 apply -c au,nz -m allow

To block a specific country on both IPv4 and IPv6, use:

geowall -4 -6 -i eth0 apply -c {countrycode} -m deny

To update rules for IPv4 to use AU and NZ use - this will clear existing rules and replace with AU and NZ:

geowall -4 -i eth0 apply -c au,nz

To allow only AU and NZ IP's and block everything else on both IPv4 and IPv6 and save the rules use:

geowall -4 -6 -i eth0 -s apply -c au,nz -m allow

To build this application: Requires Golang 1.11.1

go get -u github.com/digitalsparky/geowall

Like my stuff?

Would you like to buy me a coffee or send me a tip? While it's not expected, I would really appreciate it.

Paypal Buy Me A Coffee