Block all GEO IPs execpt one

Options
PeterHer
PeterHer Posts: 21
First Comment Sixth Anniversary
image  Freshman Member
in Security
Hi All,

Is it possible to block all GEO IPs except one?
I know it is possible to deny a GEO IP, but I have to add all of them, which is very cumbersome.

I have an USG40 and USG210.
I hope someone can help me.

Thanks in advance.
Peter

Accepted Solution

  • p4_greg
    p4_greg Posts: 50
    Network Detective-New Adventure Badge First Comment Friend Collector Fourth Anniversary
    image  Ally Member
    Answer ✓
    Options
    If you want to allow only USA IPs(for example), you can do it with 2 firewall rules.
    The first rule allows all USA GEO-IPs, the second rule blocks all other IPs.

    Rule #1:
    From: WAN
    To: LAN
    Source: USA_GEO_IPs
    Action: Allow

    Rule #2:
    From: WAN
    To: LAN
    Source: any
    Action: Deny

All Replies

  • p4_greg
    p4_greg Posts: 50
    Network Detective-New Adventure Badge First Comment Friend Collector Fourth Anniversary
    image  Ally Member
    Answer ✓
    Options
    If you want to allow only USA IPs(for example), you can do it with 2 firewall rules.
    The first rule allows all USA GEO-IPs, the second rule blocks all other IPs.

    Rule #1:
    From: WAN
    To: LAN
    Source: USA_GEO_IPs
    Action: Allow

    Rule #2:
    From: WAN
    To: LAN
    Source: any
    Action: Deny

  • mMontana
    mMontana Posts: 1,511
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 50 Answers 1000 Comments
    image  Guru Member
    Options
    @PeterHer would you please articulate/expand a bit more your question?
  • PeterHer
    PeterHer Posts: 21
    First Comment Sixth Anniversary
    image  Freshman Member
    edited February 2022
    Options
    Well I only want to give Dutch IP addressees access to my server, which is behind an USG210.
    I want to block all other IP addresses. But with the above suggestion and this video (https://support.zyxel.eu/hc/nl/articles/360001378533-Hoe-de-Geo-IP-functie-te-gebruiken), it seems that this problem has been solved.

    Thank you.




  • mMontana
    mMontana Posts: 1,511
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 50 Answers 1000 Comments
    image  Guru Member
    edited February 2022
    Options
    Not all the community is familiar with spoken Dutch, so I will try to simplify how this goal could be achieved.
    Rule #1:
    From: WAN
    To: LAN
    Source: Allowed IP Address
    Action: Allow

    GeoIP should not be necessary if you're allowing only one (or some) ip addresses, unless there are some more angles and rules about it.

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）