Maxmind Block of Countries Inbound

[spetrillo]

Hello all,

I have setup a rule to block inbound access from countries I do not allow, via Maxmind. The rule allows me to log enties that are processed by this rule. What is the name and location of the log? I would like to see if I could use Monit to alert me when this rule is invoked.

Thanks,
Steve

[meyergru]

/var/log/filter/latest.log

[spetrillo]

Ohh damn...there is alot of blocked IPs. More than I expected...guess its time for a syslog solution if I really want to track this stuff. This is wayyyy past Monit.

[meyergru]

BTW: https://docs.opnsense.org/manual/how-tos/ipinfo_geo_ip.html is way more detailed and accurate than Maxmind. You may have to enlarge the "Firewall Maximum Table Entries" to make it work.