Page 1 of 1

exclude Country from blocklists

Posted: 01 Oct 2019, 12:24
by blueice
Hello,
i want to exclude a Country from blocklists.
Blocklists provide good protection but they have some false reports (specially in dynamic ips from ISP providers).
For this reason i want to exclude the Country with the most visitors.
I have try the CC_IGNORE but they not work.
Is any way to do this? I think is very useful feature.
Thank you

Re: exclude Country from blocklists

Posted: 03 Oct 2019, 07:15
by BallyBasic79
Providing more information could help to get you more support. Please clarify:
  • CSF version
  • CC_IGNORE setting
  • CC_LOOKUPS setting
  • Blocklist(s) used and where/how used
  • sample lfd.log lines containing 'GeoLite2'
From your description, I am not clear as to what is working and what is not.

In the iptables filter table, is there Chain CC_IGNORE? Is there one for the blocklist?

If you search iptables for IP address for an IP known to be in the CC_IGNORE country, what is the response?

Is it possible that the blocklist and CC_IGNORE are cancelling each other out, or one overriding the other? (Not sure if that is possible or not.)

Please confirm this info so you can get more support.