Block China, russia etc ..

[Kronyx]

I know it has been discussed but I tried with that : https://github.com/RMerl/asuswrt-merlin/wiki/Using-ipset but I can't see if it's working or not or don't know how to test it. I still can see china web pages. Is there something else I can do ?

Thanks !

 

[ColinTaylor]

I know it has been discussed but I tried with that : https://github.com/RMerl/asuswrt-merlin/wiki/Using-ipset but I can't see if it's working or not or don't know how to test it. I still can see china web pages. Is there something else I can do ?

Thanks !

You won't block web pages because they are outgoing connections from your computer. The script blocks unsolicited incoming connections.

If you change this line:

[ -z "$(iptables-save | grep BlockedCountries)" ] && iptables -I INPUT -m set $MATCH_SET BlockedCountries src -j DROP

to this:

[ -z "$(iptables-save | grep BlockedCountries)" ] && iptables -I INPUT -m set $MATCH_SET BlockedCountries src -j logdrop

you will be able to see the dropped traffic in the syslog.

 

[Kronyx]

Ok, I understand now !

But I just saw this line in the syslog:

Feb 10 12:29:47 dropbear[19313]: Login attempt for nonexistent user from 89.249.235.132:41553

I did a ip lookup and it's from Russia and I block Russia so it's not working ? I did start the firewall-start earlier today ...

 

[ColinTaylor]

Yes, it looks like it's not working. Try rebooting the router and then look in the syslog to see if the firewall-start script is starting correctly.

Beyond that I can't comment as I don't use that script.

 

[Kronyx]

Ok, i'll try that, thanks a lot Colin !