Xt geoip

Languages:

English  • français

xt geoip logo
Maintainer	mab974
Url	https://wiki.contribs.org
Category	security
Tags	ssh, geoip, iptables, firewall, geoip2

Maintainer

Michel Begue

Version

Devel 10:

1.3.1-21

Contrib 10:

1.3.1-20

Contrib 9:

1.0.1-26

smeserver-xt_geoip

The latest version of smeserver-xt_geoip is available in the SME repository, click on the version number(s) for more information.

Contrib 10:

2.14-01

Contrib 9:

1.47.1-13

xtables-addons

The latest version of xtables-addons is available in the SME repository, click on the version number(s) for more information.

Contrib 10:

2.14-05

Contrib 9:

1.47.1-11

xtables-addons-kmod

The latest version of xtables-addons-kmod is available in the SME repository, click on the version number(s) for more information.

Alpha 10:

2.14-05

Alpha 9:

2.6.32-754.el6.x86_64-1.47.1-11

kmod-xtables-addons

The latest version of kmod-xtables-addons is available in the SME repository, click on the version number(s) for more information.

Alpha 9:

1.47.1-11

akmod-xtables-addons

The latest version of akmod-xtables-addons is available in the SME repository, click on the version number(s) for more information.

Installation

yum --enablerepo=smecontribs,smetest install smeserver-xt_geoip

then

signal-event xt_geoip-update
config set UnsavedChanges no

you might have issues with kmod not populating the weak-updates folder, which results in geoip module being not available (modprobe xt_geoip will give an error, and panel will indicate iptable geoip not working), if so just run :

weak-modules  --add-kernel

Configuration

The easiest way should be to go to server manager and use the panel.

you can list the available configuration with the following command :

config show masq

Some of the properties are not shown, but are defaulted in a template or a script. Here a more comprehensive list with default and expected values :

property	default	values
BadCountries	A1	coma separated strings	list of 2 letters countries to block
GeoIP	enabled	enabled,disabled

NOTE: masq is a the entry fo the SME firewall, there are plenty of other property for this key, please refer to manual. Only properties added by this contrib are referenced here.

Uninstall

yum remove smeserver-xt_geoip   xtables-addons xtables-addons-kmod

Bugs

Please raise bugs under the SME-Contribs section in bugzilla and select the smeserver-xt_geoip component or use this link

Below is an overview of the current issues for this contrib:

ID	Product	Version	Status	Summary (4 tasks) ⇒
12445	SME Contribs	10.0	CONFIRMED	NFR do not block remote access authorized
12438	SME Contribs	10.0	CONFIRMED	wrong path to event /etc/e-smith/events/remote-access-update/
12418	SME Contribs	10.0	CONFIRMED	smeserver-xt_geoip NFR Add UDP support
10787	SME Contribs	9.2	CONFIRMED	avoid masq restart and events optimisation

Changelog

Only released version in smecontrib are listed here.