csf.ignore for country

[svendsen]

Hi,

I'm looking for a solution/workaround NOT to block ip addresses from country ABC when hit by lfd (fx login failures, etc.)
Are there any easy way?

I have been looking at https://www.countryipblocks.net/country_selection.php
Which can generate a list (not sure if it's complete, but that's ok) of CIDR for Whole country. But the list will naturally be QUITE long. So I fear that it will have performance influence when putting list of 100000s CIDRs to csf.ignore file

Any hints?

[asmar]

I'm also interested in this. Did you found a solution or you just used the list you've mentioned?