Re: [LEDE-DEV] Adding firewall extensions for xt_geoip usage

2017-12-10 Thread Philip Prindeville
> On Dec 9, 2017, at 1:33 AM, Arjen de Korte wrote: > > Citeren Philip Prindeville : > >> Jo and others: >> >> Is there an easy way to extend firewall rules? I’d like to add support to >> blocking on a per-country basis, possibly with qualified exceptions. > > Take a look at /etc/firewall.

Re: [LEDE-DEV] Adding firewall extensions for xt_geoip usage

2017-12-09 Thread Arjen de Korte
Citeren Philip Prindeville : Jo and others: Is there an easy way to extend firewall rules? I’d like to add support to blocking on a per-country basis, possibly with qualified exceptions. Take a look at /etc/firewall.user. Most stuff you want to add fits nicely in there. The comments in

Re: [LEDE-DEV] Adding firewall extensions for xt_geoip usage

2017-12-09 Thread Kevin Darbyshire-Bryant
> On 9 Dec 2017, at 01:15, Philip Prindeville > wrote: > > > config rule > option name kaspersky_servers > option prototcp > option dest_port 25 > list src81.176.69.118 > list src81.176.230.4 > list src91.103.66.246 > l