Port forwarding only allowed from specific region/country/geoid , deny - all

[Pergola Fabio]

Hi,

on a synology router, its quite easy to setup firewall rules, to allow only specific regions countrys.

usefull if you have port forwardings setup, and you know you are the only one using is; so the rest of the world is not able to access it
see here as example screenshot : http://123dio.com/Synology-forum-int/RT1900ac/Firewall/SRM-1-1-1_6414_firew_01b.gif

i dont find this setting on an asus router ?

thnx in advance

 

[RMerlin]

Not supported.

 

[Pergola Fabio]

is there a workaround then? because there is a firewall section where you can specify source ip
but how can you tell the source ip from a region? how is synology doing this?

 

[ColinTaylor]

You can't do it in router's GUI. Like RMerlin said, it's not supported.

If you're running Merlin's firmware you could install a user created script which does country blocking called Skynet.

https://www.snbforums.com/threads/skynet-asus-firewall-addition.16798/

 

[Pergola Fabio]

Ok, More stuff to read, thnx for info

 

[RMerlin]

how is synology doing this?

They probably use the GeoIP kernel module to create the iptables rules.

 

[Pergola Fabio]

hmm, seems i need "iptables" instead of "skynet" script
can some1 provide me an example how to do this?

thnx

 

[ColinTaylor]

hmm, seems i need "iptables" instead of "skynet" script

Skynet uses iptables. You could download Skynet and look at the code if you want to know how to do it.

 

[Pergola Fabio]

Skynet uses iptables. You could download Skynet and look at the code if you want to know how to do it.

ok, can you help me first wit this? so i need to know first who i need to allow
https://www.snbforums.com/threads/firewall-log-for-port-forwarding.50064/

 

[ColinTaylor]

ok, can you help me first wit this? so i need to know first who i need to allow
https://www.snbforums.com/threads/firewall-log-for-port-forwarding.50064/

Sorry, I can't help you. If you've turned on Logged packets and you're not seeing anything in the router's log I don't know why would be.