Hi Janwillem,

Just saw in the shop that APF doesn’t use the GeoIP modulenon 5210, are there alternatives?

On EL8 we sadly no longer have /etc/hosts.allow and /etc/hosts.deny, which was needed for the GeoIP-feature. That's why the APF on 5210R comes without it.

If not I’ll setup a PfSense instance for that purpose.

Yeah, that might certainly be best if you can. You might still want Fail2ban and Firewalld on the 5210R itself, though. To block brute force login attempts.

--
With best regards

Michael Stauber
_______________________________________________
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

Reply via email to