Feature #88412

GeoIP based logging/blocking on proxy servers

Added by Andri Steiner about 2 years ago. Updated over 1 year ago.

Status:
Closed
Priority:
Should have
Assignee:
Target version:
-
Start date:
2019-05-21
Due date:
% Done:

100%

Estimated time:

Description

  • implement GeoIP module
  • concept/sample to block dedicated country
  • concept/sample to block dedicated asn
  • whitelist single address
  • log country and asn

Related issues

Related to Server Team - Task #73622: Attempt to block DOS attacksClosed2016-02-23

Actions
#1

Updated by Michael Stucki about 2 years ago

  • Related to Task #73622: Attempt to block DOS attacks added
#2

Updated by Andri Steiner about 2 years ago

srv196


apt-get install nginx-module-geoip
/etc/nginx/nginx.conf
/etc/nginx/conf.d/geo.conf

# Configuration
geoip_country /etc/nginx/geo/country.dat;
geoip_city /etc/nginx/geo/city.dat;
geoip_org /etc/nginx/geo/asn.dat;

map $remote_addr $block_host {
  default false;
#  94.186.195.191 true;    
}

map $geoip_country_code $block_country {
  default false;
#  CH true;
}

map $geoip_org $block_asn {
  default false;
#  ~*^AS198249 true;
}
#3

Updated by Andri Steiner over 1 year ago

  • Status changed from New to Closed
  • % Done changed from 0 to 100

Also available in: Atom PDF