What's new

Block China, russia etc ..

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

I know it has been discussed but I tried with that : https://github.com/RMerl/asuswrt-merlin/wiki/Using-ipset but I can't see if it's working or not or don't know how to test it. I still can see china web pages. Is there something else I can do ?

Thanks !
You won't block web pages because they are outgoing connections from your computer. The script blocks unsolicited incoming connections.

If you change this line:
Code:
[ -z "$(iptables-save | grep BlockedCountries)" ] && iptables -I INPUT -m set $MATCH_SET BlockedCountries src -j DROP
to this:
Code:
[ -z "$(iptables-save | grep BlockedCountries)" ] && iptables -I INPUT -m set $MATCH_SET BlockedCountries src -j logdrop
you will be able to see the dropped traffic in the syslog.
 
Ok, I understand now !

But I just saw this line in the syslog:

Feb 10 12:29:47 dropbear[19313]: Login attempt for nonexistent user from 89.249.235.132:41553

I did a ip lookup and it's from Russia and I block Russia so it's not working ? I did start the firewall-start earlier today ...
 
Yes, it looks like it's not working. Try rebooting the router and then look in the syslog to see if the firewall-start script is starting correctly.

Beyond that I can't comment as I don't use that script.
 

Similar threads

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top