GeoIP Just Not Working

[TheLatestWire]

Hi,

I've noticed for quite a long time that my user defined IDS GeoIP drop rules just aren't working.  I just verified it this evening when SPAM from 45.65.227.2 was delivered to my email server which is behind my OPNsense firewall.

45.65.227.2 is identified by goeiplookup on the OPNsense server as Argentina which is in my source block rule.

I just don't understand why if geoiplookup from the shell of the OPNsense server itself successfully identiifies the country of origin, why isn't it being blocked?

Nearly everything that makes it through my firewall should be blocked by the countries I'm blocking with the IDS goeipblock rule but they aren't.   Is there anyway this feature could be improved on please?

Thanks,
ObecalpEffect.

[mimugmail]

GeoIP should be done via Alias now
https://docs.opnsense.org/manual/aliases.html