IPS GeoIP Blocking - Exceptions

[systm]

How would one allow a specific IP from a country that is blocked via IPS GeoIP Blocking as in (https://docs.opnsense.org/manual/how-tos/ips-geoip.html)?  Coming from pfSense, the GeoIP mechanism (pfblocker) essentially created firewall aliases that you could choose to supersede with specific IP's from the excluded countries.  Since the IPS system does not seem to work this way, I am unsure how to add an exception.  I am sure I am just missing something, but any guidance would be greatly appreciated.

Thanks!

[AdSchellevis]

Hi,

Use aliases (type geoip) in combination with firewall rules, that should do the trick.

Best regards,

Ad

[systm]

Brilliant! Thanks of the quick response!

How are the GeoIP lists updated?  If I remove it from the IPS, how would it update (assuming that was the mechanism that updated it in the 1st place)?

[AdSchellevis]

There's  a cron job updating the geoip database once a day when used (/usr/local/etc/rc.update_urltables)