Difference between revisions of "Xt geoip"

From SME Server
Jump to navigationJump to search
Line 47: Line 47:
 
</syntaxhighlight>
 
</syntaxhighlight>
  
you might have issues with kmod not populating the weak-update folder, if so just run :
+
you might have issues with kmod not populating the weak-updates folder, which results in geoip module being not available (modprobe xt_geoip will give an error, and panel will indicate iptable geoip not working),  if so just run :
 
  weak-modules  --add-kernel
 
  weak-modules  --add-kernel
 
=== Configuration ===
 
=== Configuration ===

Revision as of 05:19, 19 February 2019




xt geoip
NeedImage.svg
xt geoip logo
Maintainermab974
Urlhttps://wiki.contribs.org
Category

security

Tags sshgeoipiptablesfirewallgeoip2


Maintainer

Michel Begue


Version

Contrib 10:
Contrib 9:
smeserver-xt_geoip
The latest version of smeserver-xt_geoip is available in the SME repository, click on the version number(s) for more information.


Contrib 10:
Contrib 9:
xtables-addons
The latest version of xtables-addons is available in the SME repository, click on the version number(s) for more information.


Contrib 10:
Contrib 9:
xtables-addons-kmod
The latest version of xtables-addons-kmod is available in the SME repository, click on the version number(s) for more information.


Alpha 10:
kmod-xtables-addons
The latest version of kmod-xtables-addons is available in the SME repository, click on the version number(s) for more information.


Alpha 9:
akmod-xtables-addons
The latest version of akmod-xtables-addons is available in the SME repository, click on the version number(s) for more information.


Description

Installation

yum --enablerepo=smecontribs,smetest install smeserver-xt_geoip


then

signal-event xt_geoip-update
config set UnsavedChanges no

you might have issues with kmod not populating the weak-updates folder, which results in geoip module being not available (modprobe xt_geoip will give an error, and panel will indicate iptable geoip not working), if so just run :

weak-modules  --add-kernel

Configuration

The easiest way should be to go to server manager and use the panel.

you can list the available configuration with the following command :

config show masq


Some of the properties are not shown, but are defaulted in a template or a script. Here a more comprehensive list with default and expected values :

property default values
BadCountries A1 coma separated strings list of 2 letters countries to block
GeoIP enabled enabled,disabled

NOTE: masq is a the entry fo the SME firewall, there are plenty of other property for this key, please refer to manual. Only properties added by this contrib are referenced here.

Uninstall

yum remove smeserver-xt_geoip   xtables-addons xtables-addons-kmod

Bugs

Please raise bugs under the SME-Contribs section in bugzilla and select the smeserver-xt_geoip component or use this link


Below is an overview of the current issues for this contrib:

IDProductVersionStatusSummary (4 tasks)
12445SME Contribs10.0CONFIRMEDNFR do not block remote access authorized
12438SME Contribs10.0CONFIRMEDwrong path to event /etc/e-smith/events/remote-access-update/
12418SME Contribs10.0CONFIRMEDsmeserver-xt_geoip NFR Add UDP support
10787SME Contribs9.2CONFIRMEDavoid masq restart and events optimisation

Changelog

Only released version in smecontrib are listed here.