Question Implement Fail2Ban banning on country basis

[Bossman]

I am trying to implement solution which will ban IP on country basis, i know that Juggernaut can do that but in my env that module was causing spontaneous firewall block for all traffic, so i am just searching other way to ban country based on MaxMind GeoIP databases.

Does anyone have heard of such solution, which can be integrated in Plesk ?

 

[robotic]

I've never tried it, but Spamassassin has a GeoIP plugin.

 

[Bossman]

Spamassassin is totally diff thing. I need something for blocking (Firewall)

 

[robotic]

X-tables addon for iptables has geoip.

How to Block IPs from Countries using Iptables Geoip Addons

How to block IPs and traffics originating from and destined to a specifc country using geoip and iptables addons in Linux based machine.

linoxide.com

 

[Bossman]

Okay that will do, do you think it will not break Plesk itself ?

 

[IgorG]

Please vote for this fearure here Block the IP of the selected country in Firewall

 

[Bossman]

IgorG i already did that, but i know Pleask team has a lot of work, so i guess it will take time to have such function in plesk

 

[pozar]

Please add! Either via IPTABLES or using NGINX's GeoIP library.

 

[danami]

I am trying to implement solution which will ban IP on country basis, i know that Juggernaut can do that but in my env that module was causing spontaneous firewall block for all traffic, so i am just searching other way to ban country based on MaxMind GeoIP databases.

@Bossman did you open a support ticket about this? I would be happy to try to diagnose the issue for you. You should note that we also support country blocking at the web server level too using the mod_maxminddb Apache module.

 

[tkalfaoglu]

I do have some customers that legitimately go to "spam countries", so I would hate to block them solely just because of their GeoIP rating..
However, it would be great if the fail2ban "maxretry" could be different for such users - that are already flagged by country..