ClearFoundation Tracker - ClearOS
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0007591ClearOSapp-firewall - Firewallpublic2016-03-07 13:432020-03-04 10:02
Reporteruser2 
Assigned ToNickH 
PrioritynormalSeverityfeatureReproducibilityhave not tried
StatusclosedResolutionfixed 
PlatformOSOS Version
Product Version 
Target VersionFixed in Version 
Summary0007591: Add some kind of firewall GeoIP hook
DescriptionMore to come.
Steps To Reproduce
Additional Information
TagsNo tags attached.
Relationships
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2016-03-07 13:43user2New Issue
2016-04-08 13:20user2Note Added: 0003061
2016-04-08 13:20user2Statusnew => confirmed
2020-03-04 10:02NickHNote Added: 0013371
2020-03-04 10:02NickHStatusconfirmed => closed
2020-03-04 10:02NickHAssigned To => NickH
2020-03-04 10:02NickHResolutionopen => fixed

Notes
(0003061)
user2   
2016-04-08 13:20   
(From a very helpful customer!)

So, some info to help on the development track....

X-table-addons for iptables is readily available. It provides tarpit, deluge, network scanning and geoip functions to iptables.

https://www.howtoforge.com/xtables-addons-on-centos-6-and-iptables-geoip-filtering [^]

http://xtables-addons.sourceforge.net/ [^]

the geoip tables are something that you can download and convert and then push out to clients

the firewall interface would need to be changed to have a couple of options like a checkbox for "Respond to icmp requests" and an "Allow from Countries" button & checkbox that would take you to another page with a list of countries and provinces/states.
(0013371)
NickH   
2020-03-04 10:02   
Migrated to https://gitlab.com/clearos/clearfoundation/app-firewall/issues/25 [^]