GeoFiltering Options

5th August 2026

I have intentionally limited this list to solutions that are easy to use / have a web interface, because I need to document how to use and update this so someone else can also do it. I know how to use command line, but I don’t have the time to maintain everything i build. Also eventually i will be fired for incompetence :/

Unifi Geofiltering -Con: doesn’t support different rules for different tcp ports

OpnSense + Maxmind
https://www.youtube.com/watch?v=ZydXjTt9y2A at about 3m in he shows the URL for GeoUpdates

pfSense + pfBlockerNG -Pro easier than OpnSense?

Nginx + Maxmind GeoFilter -Con hardest to setup +Pro works in Digital Ocean
https://www.youtube.com/watch?v=5KMu6XywJMI&t=39s

HaProxy + external Geo list

ISP IP range filter in UFW/FirewallD +Pro simple +Pro more narrow -Con takes more time/effort to reverse engineer multiple ISP IP range