
Number of CC entries and may improve iptables throughput. Ignore CIDR blocks smaller than this value when implementing CC_DENY / CC_ALLOW / CC_ALLOW_FILTER. Ignore CIDR blocks smaller than - CC_DROP_CIDR Prevent the login failure daemon from blocking IP address hits for the following countries or ASNs.ĬC_LOOKUPS must me enabled to use this option. LFD blocking ignore countries - CC_IGNORE Only allow access from the following countries or ASN but still filter based on the port and packets rules. Only allow countries and filter - CC_ALLOW_FILTER Warning: this option allows access through all ports in the firewall. and entirely relies on that service being available.Īllow countries though all ports - CC_ALLOWĪllow whole country or ASN CIDR ranges. The CIDR blocks are generated from the Maxmind GeoLite Country database
#Maxmind geolite license key#
MaxMind requires you to create a free account on their site and to generate a license key to use their Geolite2 databases.ĭeny whole country or ASN CIDR ranges. The source for where CSF downloads its country databases. Navigate to Juggernaut Firewall -> Settings -> Country Settings and enter the license key under MaxMind license key.Generate a license key here (When asked - Will this key be used for geoipupdate? Choose: no).Country and ASN blocks apply to incoming connections only.Make sure not to block any countries where your server may be pulling yum or apt-get updates from otherwise yum or apt-get will fail when you try to grab any package updates.Built with Grav - The Modern Flat File CMS
