Feature #88412

GeoIP based logging/blocking on proxy servers

Added by Andri Steiner about 2 months ago. Updated about 2 months ago.

Status:
New
Priority:
Should have
Assignee:
Target version:
-
Start date:
2019-05-21
Due date:
% Done:

0%


Description

  • implement GeoIP module
  • concept/sample to block dedicated country
  • concept/sample to block dedicated asn
  • whitelist single address
  • log country and asn

Related issues

Related to Server Team - Task #73622: Attempt to block DOS attacks New 2016-02-23

History

#1 Updated by Michael Stucki about 2 months ago

  • Related to Task #73622: Attempt to block DOS attacks added

#2 Updated by Andri Steiner about 2 months ago

srv196


apt-get install nginx-module-geoip
/etc/nginx/nginx.conf
/etc/nginx/conf.d/geo.conf

# Configuration
geoip_country /etc/nginx/geo/country.dat;
geoip_city /etc/nginx/geo/city.dat;
geoip_org /etc/nginx/geo/asn.dat;

map $remote_addr $block_host {
  default false;
#  94.186.195.191 true;    
}

map $geoip_country_code $block_country {
  default false;
#  CH true;
}

map $geoip_org $block_asn {
  default false;
#  ~*^AS198249 true;
}

Also available in: Atom PDF