https://github.com/digitalsparky/geowall
Golang Powered GeoIP Based Firewall
https://github.com/digitalsparky/geowall
cli firewall firewall-configuration geoip go golang iptables iptables-configuration
Last synced: about 1 month ago
JSON representation
Golang Powered GeoIP Based Firewall
- Host: GitHub
- URL: https://github.com/digitalsparky/geowall
- Owner: digitalsparky
- License: gpl-3.0
- Created: 2018-10-12T10:38:56.000Z (over 6 years ago)
- Default Branch: master
- Last Pushed: 2022-09-06T18:32:18.000Z (over 2 years ago)
- Last Synced: 2024-06-20T19:15:21.604Z (12 months ago)
- Topics: cli, firewall, firewall-configuration, geoip, go, golang, iptables, iptables-configuration
- Language: Go
- Size: 855 KB
- Stars: 5
- Watchers: 2
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE.md
Awesome Lists containing this project
README
# GEOWall [](https://travis-ci.com/digitalsparky/geowall)
Downloaded and updates IPtables based on Geo IP lists and country.
Works with both 'block country' and 'allow only' country modes.
IP block rules from:
- IPv4: http://www.ipdeny.com/ipblocks/data/aggregated/
- IPv6: http://www.ipdeny.com/ipv6/ipaddresses/aggregated/
Simply match the 'country code' to the country characters at the start of the {countrycode}-aggredated.zone file
```
NAME:
geowall - GeoIP Based Firewall
USAGE:
main [global options] command [command options] [arguments...]
AUTHOR:
Matt Spurrier
COMMANDS:
apply
unload
help, h Shows a list of commands or help for one command
GLOBAL OPTIONS:
--v4, -4, --ipv4 Include IPv4 Rules
--v6, -6, --ipv6 Include IPv6 Rules
--iface value, -i value Inbound Interface
--save, -s Save IPTables Rules
--help, -h show help
--version, -v print the version
COPYRIGHT:
(c) 2021 Matt Spurrier
```
For example, to only allow AU IP's to the server on eth0 and block everything else, use:
```
geowall -4 -6 -i eth0 apply -c au -m allow
```
This will download and process:
http://www.ipdeny.com/ipblocks/data/aggregated/au-aggregated.zone to IPTables
http://www.ipdeny.com/ipv6/ipaddresses/aggregated/au-aggregated.zone to IP6Tables
To unload IPv4 and IPv6 rules on eth0 run:
```
geowall -4 -6 -i eth0 unload
```
To allow only AU and NZ IP's and block everything else on both IPv4 and IPv6, use:
```
geowall -4 -6 -i eth0 apply -c au,nz -m allow
```
To block a specific country on both IPv4 and IPv6, use:
```
geowall -4 -6 -i eth0 apply -c {countrycode} -m deny
```
To update rules for IPv4 to use AU and NZ use - this will clear existing rules and replace with AU and NZ:
```
geowall -4 -i eth0 apply -c au,nz
```
To allow only AU and NZ IP's and block everything else on both IPv4 and IPv6 and save the rules use:
```
geowall -4 -6 -i eth0 -s apply -c au,nz -m allow
```
To build this application:
Requires Golang 1.11.1
```
go get -u github.com/digitalsparky/geowall
```
# Like my stuff?
Would you like to buy me a coffee or send me a tip?
While it's not expected, I would really appreciate it.
[](https://paypal.me/MattSpurrier) 