You should block all IP addresses from China in the firewalls such as ipset or iptables.

I block all inbound connections from China and Russia via GeoIP blocking in Opnsense and no one in my household has ever complained. Considering setting it up to blocking outgoing as well, but any …

China block using ipset You can't manually add a few thousand IP addresses to your iptables, and even doing it automatically is a bad idea because it can cause a lot of CPU load (or so I've read).

Feb 25, 2022 · Ppl who using russian ip addresses are not involved into this, at least not all of them. Blocking country range is up to you, but how you think you make worse for some badass in X country …

Feb 27, 2022 · Instead of blocking lots and lots of IP addresses, I use a block by default policy, and only allow traffic from IP ranges / countries that I expect traffic from.

Apr 21, 2023 · The underlying firewall iptables / nftables do not support geo lookups as far as I'm aware. Plus, crowdsec is intended for short-term bans. However, you can do long ones. My …

My predecessor blocked all Chinese IP's like I probably would have in his shoes. However the company is starting to do business in China. We have a sales rep visiting China for a few months to generate …

How to block brute force attacks? I'm getting a ton of brute force attacks from the WAN interface. "User login denied due to bad credentials" These are coming from a set of specific IP addresses. If I …

Feb 22, 2022 · It’s not like Russian attacks come from Russian IP addresses haha… that’s just not how this works. If this is some regulatory/legal checkbox then using geoip tables is often too inaccurate to …

Feb 24, 2022 · Russian/Chinese IP providers are forgiving when it comes to spamming/attacking the world, as long as it aligns with their agenda. If you would use a European IP provider and reports …