26

Block by Country (GeoIP)

REQUEST: Please provide the ability to Block by Country, using the GeoIP details of the resulting IP.

Since the destination_country is listed in the 'Download logs', it should be possible to block the resolved Country. Blocking by Country will further improve security by blocking access to IP's in countries that may be hosting malicious / threat-based content, etc. or simply countries we do not want to visit.

timestamp,domain,query_type,dnssec,protocol,client_ip,status,reasons,destination_country,root_domain,device_id,device_name,device_model,device_local_ip,matched_name,client_name

 

NOTE: For those also interested in this, please understand that this can be a challenge to provide reliably, but it's still worth asking for even if they are unable to provide it immediately. GeoIP accuracy is not 100% accurate and as a result can cause trouble when trying to access a known good site when the resulting GeoIP detail comes back to an invalid Country. Further... it takes time for the related GeoIP details to be corrected.

Example: yesterday you were able to reach www[.]outlook[.]com which the IP's resolved to the US, but today it is blocked as the IP's now resolve to NL or some other Country which may be in your blocked Country list. 

The temporary workaround would be to add the related Domain to the Allowlist to bypass the related Country block. 

3replies Oldest first
  • Oldest first
  • Newest first
  • Active threads
  • Popular
  • Beside country, "Region" or "Area" would be nice as well. For example "Asia" or "Antarctica". Or "Eastern Europe". Most GEO databases (GeoNames for example) have these indicators (up to city level as well).

    Like 1
      • TechStud
      • TechStud
      • 10 mths ago
      • 1
      • Reported - view

      Chris Buijs Blocking by continent might be too large. But I could envision that the countries are grouped under a Continent header. It would help further in understanding which continent the related country belongs to.  

      Like 1
  • Perhaps a "grouping" feature would help, not only for GEO but where you can create a blocking-group that can have "countries" and "block-list" entries, so you can pick your own.

    Or link the IP-Address of a country to its ccTLD and block/deny it with the existing TLD Blocking feature.

    The deny/allowlist functions should allow this as well.

    Like 1
Like26 Follow
  • 26 Likes
  • 10 mths agoLast active
  • 3Replies
  • 248Views
  • 2 Following