GEOIP, not blocking?

« previous next »

Print

Pages: [1]

Author Topic: GEOIP, not blocking? (Read 2487 times)

cranky

Newbie
Posts: 38
Karma: 0

GEOIP, not blocking?

« on: April 03, 2021, 02:28:40 pm »

So i setup Maxmind's GEOIP and it imported all the ranges successfully.
I made an alias that has Russia selected (effectivly a block all in Russia?)
I then added a rule to block all traffic from that geoip alias.
I expected that i could not access any russian sites, but i can still freely access it.

What did i do wrong in my process?

Logged

marjohn56

Hero Member
Posts: 1701
Karma: 179

Re: GEOIP, not blocking?

« Reply #1 on: April 04, 2021, 04:27:01 am »

Nothing, GEOIP blocks them from your device, not you from accessing them. I run a webserver, you can only access it from about 5 countries, the rest are blocked.

Logged

OPNsense 24.7 - Qotom Q355G4 - ISP - Squirrel 1Gbps.

Team Rebellion Member - If we've helped you remember to applaud

gpb

Full Member
Posts: 234
Karma: 13

Re: GEOIP, not blocking?

« Reply #2 on: April 04, 2021, 01:42:05 pm »

I added a GEOIp block rule (floating) on my LAN, VLAN, and WAN interfaces with any source and it blocks everything...including outbound. I thought outbound might be equally useful for malware ignoring that malware is hosted globally. It does stop me when I click a sketchy result in a google search though.

Logged

HP T730/AMD RX-427BB/8GB/500GB SSD
HP NC365T 4-PORT

marjohn56

Hero Member
Posts: 1701
Karma: 179

Re: GEOIP, not blocking?

« Reply #3 on: April 04, 2021, 01:45:59 pm »

True, had not thought about adding them there, then again I do access some sites in zones that are blocked for incoming so it could get a bit complicated.

Logged

OPNsense 24.7 - Qotom Q355G4 - ISP - Squirrel 1Gbps.

Team Rebellion Member - If we've helped you remember to applaud

Print

Pages: [1]

« previous next »