Messages

1

General Discussion / Re: GeoIP URL / IP Exclusion

« on: November 13, 2024, 06:57:59 pm »

Thank you for this information, I was able to create a Nested Group with my GeoIP alias and IP_Whitelist alias which worked.

My next question is, can an alias be created to exclude hostnames instead?

For example, my IP_White list has "!178.162.131.118" which currently excludes opnsense.org from the GeoIP block. I've seen documentation that says you should be able to do "!opnsense.org", but I get an invalid hostname when trying to save it.

2

General Discussion / GeoIP URL / IP Exclusion

« on: November 12, 2024, 09:21:27 pm »

Version: OPNsense 24.7.7-amd64

I am currently utilizing the GeoIP settings to block the top countries based on malicious actors.

I would like to add the Netherlands to this block list, but cannot since opnsense.org is hosted there. Is it possible to create some type of rule above my country block that would exclude the opnsense.org domain? I tried doing this via host and IP aliases, but it didn't seem to work.

Any assistance would be greatly appreciated.