GeoFiltering Options

5th August 2026

I have intentionally limited this list to solutions that are easy to use / have a web interface, because I need to document how to use and update this so someone else can also do it. I know how to use command line, but I don’t have the time to maintain everything i build. Also eventually i will be fired for incompetence :/

https://github.com/friendly-bits/geoip-shell

apt install cron curl
curl -L “$(curl -s https://api.github.com/repos/friendly-bits/geoip-shell/releases | grep -m1 -o ‘https://api.github.com/repos/friendly-bits/geoip-shell/tarball/[^”]*’)” > geoip-shell.tar.gz
tar -zxvf geoip-shell.tar.gz
cd fr {tab}{enter}
sh geoip-shell-install.sh

script prompts for install mode, allowlist/blocklist, which countries to block, the local private address range to allow. downloads all the lists, sets up a cron job to keep it updated. easily allows turning it on/off

Unifi Geofiltering -Con: doesn’t support different rules for different tcp ports

Fortinet/PaloAlto etc -Con expensive -Con some Cloud Host

OpnSense + Maxmind
https://www.youtube.com/watch?v=ZydXjTt9y2A at about 3m in he shows the URL for GeoUpdates

pfSense + pfBlockerNG -Pro Web user interface +Pro custom image can upload to Digital Ocean +Pro easy setup +Pro paid support via NetGate

Nginx + Maxmind GeoFilter -Con hardest to setup +Pro works in Digital Ocean
https://www.youtube.com/watch?v=5KMu6XywJMI&t=39s

HaProxy + external Geo list

ISP IP range filter in UFW/FirewallD +Pro simple +Pro more narrow -Con takes more time/effort to reverse engineer multiple ISP IP range

Windows Store App; Harden System Security by Violet Hansen +Pro easy to install & use -Con interface is a little crashy

Knocknoc not strictly geo-filtering but very interesting