User Tools

Site Tools


geoip_iptables_blocking

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
geoip_iptables_blocking [2016/03/08 15:29] admingeoip_iptables_blocking [2019/05/08 19:38] (current) admin
Line 1: Line 1:
 =====GeoIP for use with iptables (Debian 8 Jessie)===== =====GeoIP for use with iptables (Debian 8 Jessie)=====
 +//
 +__**OUTDATED. MAXMIND stuff has changed. needs rework.**__//
  
 ===install necessary software=== ===install necessary software===
Line 43: Line 45:
 </code> </code>
  
-===Bug hunting===  +===Check your success===
-(was on an arm machine, Linux hostname 3.16.0-4-kirkwood #1 Debian 3.16.7-ckt20-1+deb8u4 (2016-02-29) armv5tel GNU/Linux)+
  
-<code>cat /proc/net/ip_tables_matches +Lets take a look at the attack statistics
-limit +
-conntrack +
-conntrack +
-conntrack +
-multiport +
-udplite +
-udp +
-tcp +
-icmp +
-</code>+
  
-no geoip, thats not cool.+{{ ::attack_stats.png |}}
  
-Solution:+phew, 0 attacks since i use GeoIP Tables blocking. I don't need my blocklist.de account anymore. At least not for SSH attacks. 
 + 
 + 
 +------------------------------- 
 + 
 +Samesame for raspian on raspberry  
 + 
 +Install linux kernel headers
  
 <code> <code>
-aptitude install module-assistant +apt-get update && sudo apt-get install git bc libncurses5-dev libtext-csv-xs-perl autoconf automake libtool xutils-dev iptables-dev -y 
-*** time to get a cup of coffee *** + 
-module-assistant --verbose --text-mode auto-install xtables-addons+wget https://raw.githubusercontent.com/notro/rpi-source/master/rpi-source -O /usr/bin/rpi-source && sudo chmod +x /usr/bin/rpi-source && /usr/bin/rpi-source -q --tag-update 
 + 
 +cd ~ 
 +rpi-source
 </code> </code>
  
-===failed, damn=== +Install xtables-addons
-well then we take a little barefoot walk+
  
 <code> <code>
-apt-get install git autoconf automake libtool xutils-dev 
- 
 git clone git://git.code.sf.net/p/xtables-addons/xtables-addons git clone git://git.code.sf.net/p/xtables-addons/xtables-addons
 cd xtables-addons cd xtables-addons
-libtoolize --force +./autogen.sh
-aclocal +
-autoheader +
-autoconf +
-autoreconf -i+
 ./configure ./configure
-sudo make install +make -j5 
-sudo depmod+make install 
 +depmod 
 +reboot 
 + 
 +cat /proc/net/ip_tables_matches 
 + 
 +conntrack 
 +conntrack 
 +conntrack 
 +multiport 
 +geoip 
 +udplite 
 +udp 
 +tcp 
 +icmp
 </code> </code>
geoip_iptables_blocking.1457450986.txt.gz · Last modified: 2016/03/08 15:29 by admin