Question Plesk + Cloudflare Country BLOCK

[omexlu]

Hello,

I want to exclude all countrys and only whitelists some special countrys on my website to protect agains attacks from that countrys.

I have activated 'IP Geolocation' in my Cloudflare network configuration.

Can i now add this little snipped in additional nginx part as below:

map $http_cf_ipcountry $allow {
default no;
DE yes;
FR yes;
}
if ($allow = no) {
return 403;
}

Is that enought? Maybe better than return redirect to a external website, so a get/request flood can not be effective?

Or better to work with fail2ban?

Using CloudFlare for country blocking - Nginx Library

 

[mr-wolf]

With ipset you can load the 2 countries in 2 sets.
Use 2 lines of iptables to open the ports you want.

-A INPUT -m set --match-set FR src -j ACCEPT
-A INPUT -m set --match-set DE src -j ACCEPT
-A INPUT -j DROP

 

[omexlu]

Not if using cloudflare

 

[mr-wolf]

you're right...
Totally didn't read the question properly.

I have no experience with Cloudflare. I do know what it is.