OPNsense Forum

English Forums => General Discussion => Topic started by: marvine on April 24, 2023, 04:39:11 PM

Title: Cant get geoblock working out
Post by: marvine on April 24, 2023, 04:39:11 PM
Hi All,

Question about geo-blocking i have for some time geoblocking working for incoming traffic.
But outgoing traffic i cant get it working what kind of rules i set and try.

I tried floating rules - per interface.
Any tips and tricks on this topic ?

Title: Re: Cant get geoblock working out
Post by: Patrick M. Hausen on April 24, 2023, 04:40:28 PM
Incoming rule on LAN - destination geolocation to block. Put above "allow all" rule.
Title: Re: Cant get geoblock working out
Post by: marvine on April 24, 2023, 05:29:26 PM
I tried that one still allows VK.com for example.
Its not possible to to do it firewall wide through floating rules ?
Title: Re: Cant get geoblock working out
Post by: Patrick M. Hausen on April 24, 2023, 06:41:13 PM
Do you have a current geoip database downloaded and active? You need to register an account to get a DB, if I remembers correctly.
Title: Re: Cant get geoblock working out
Post by: marvine on April 24, 2023, 09:00:01 PM
Yes DB was active but did the old IT trick reboot and remove things that dont work and start over.
Now its working again no idea what the cause was.

Thanks!