OPNsense Forum

English Forums => General Discussion => Topic started by: spetrillo on November 17, 2025, 07:22:00 PM

Title: Maxmind Block of Countries Inbound
Post by: spetrillo on November 17, 2025, 07:22:00 PM
Hello all,

I have setup a rule to block inbound access from countries I do not allow, via Maxmind. The rule allows me to log enties that are processed by this rule. What is the name and location of the log? I would like to see if I could use Monit to alert me when this rule is invoked.

Thanks,
Steve
Title: Re: Maxmind Block of Countries Inbound
Post by: meyergru on November 17, 2025, 08:42:24 PM
/var/log/filter/latest.log
Title: Re: Maxmind Block of Countries Inbound
Post by: spetrillo on November 17, 2025, 09:07:10 PM
Ohh damn...there is alot of blocked IPs. More than I expected...guess its time for a syslog solution if I really want to track this stuff. This is wayyyy past Monit.
Title: Re: Maxmind Block of Countries Inbound
Post by: meyergru on November 17, 2025, 10:22:47 PM
BTW: https://docs.opnsense.org/manual/how-tos/ipinfo_geo_ip.html is way more detailed and accurate than Maxmind. You may have to enlarge the "Firewall Maximum Table Entries" to make it work.