Only allow port access from specific country

[musangberjanggut]

Hi Team,

i'm looking for the best way to implement CSF. Currently my requirement is to have port 25,80,443 can be access from all over the world. However, certain ports like 465,587,110,143,995,993 only allow from malaysia.

currently i have set TCP_IN for 25,80,443
and CC_ALLOW_FILTER="MY" CC_ALLOW_PORTS="465,587,110,143,995,993"

However, i notice that port 587 and 465 still able to be access from other country. is there anything else that need to be set to make sure 465 and 587 can only be access from malaysia.?

please advise.

[tanfwc]

Use this settings instead.

CC_ALLOW_PORTS = "MY"
CC_ALLOW_PORTS_TCP = "465,587,110,143,995,993"