> root@firewall:~# geoiplookup 122.226.181.166 > GeoIP Country Edition: CN, China
Not sure about the iptables part because I'm not using xtables-addons 3 yet, but I believe geoiplookup is obsolete as it looks up an outdated database. You should now use mmdblookup with a command such as: mmdblookup --file /usr/share/GeoIP/GeoLite2-City.mmdb --ip 122.226.181.166 country iso_code You'll get "CN" anyway, just like with the old geoiplookup command, but at least its getting its data from an updated source. Also, is this more or less how you update the geoip database for iptables usage? /lib/xtables-addons/xt_geoip_dl /lib/xtables-addons/xt_geoip_build -D /usr/share/xt_geoip *.csv Vieri _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
