Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 0 down vote favorite

I am looking for an open source firewall with country based ip blocking feature for Linux OS.

share|improve this question
Hi sampath, welcome to IT Security. Please see the FAQ, and also read How to Ask - product recommendation questions are not a good fit for our site (or really any SE site...). – AviD♦ Oct 3 '12 at 18:57

closed as not constructive by AviD♦ Oct 3 '12 at 18:57

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or specific expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, see the FAQ for guidance.

2 Answers

up vote 3 down vote
  1. iptables
  2. Access to a geolocation database. As far as I'm aware, these all come with a fee. https://www.google.com/search?q=ip+geolocation
  3. A shell script.
share|improve this answer
1  
+1 and see this page for a sample script and free source of geo-ip data: cyberciti.biz/faq/block-entier-country-using-iptables – Colin Pickard Oct 3 '12 at 16:58
up vote 1 down vote

ipinfodb.com has a free geolocation database that can be used to get IP addresses per country. There's a bash script for using this database with iptables on this page.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.