{"id":4470,"date":"2026-08-05T12:06:48","date_gmt":"2026-08-05T16:06:48","guid":{"rendered":"https:\/\/increasec.com\/?p=4470"},"modified":"2026-08-05T12:06:48","modified_gmt":"2026-08-05T16:06:48","slug":"geofiltering-options","status":"publish","type":"post","link":"https:\/\/increasec.com\/?p=4470","title":{"rendered":"GeoFiltering Options"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">I have intentionally limited this list to solutions that are easy to use \/ have a web interface, because I need to document how to use and update this so someone else can also do it.  I know how to use command line, but I don&#8217;t have the time to maintain everything i build.  Also eventually i will be fired for incompetence  :\/<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Unifi Geofiltering  -Con: doesn&#8217;t support different rules for different tcp ports<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">OpnSense + Maxmind<br>     <a href=\"https:\/\/www.youtube.com\/watch?v=ZydXjTt9y2A\">https:\/\/www.youtube.com\/watch?v=ZydXjTt9y2A<\/a>     at about 3m in he shows the URL for GeoUpdates<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">pfSense + pfBlockerNG   -Pro easier than OpnSense?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Nginx + Maxmind GeoFilter  -Con hardest to setup   +Pro works in Digital Ocean<br>     <a href=\"https:\/\/www.youtube.com\/watch?v=5KMu6XywJMI&amp;t=39s\">https:\/\/www.youtube.com\/watch?v=5KMu6XywJMI&amp;t=39s<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">HaProxy + external Geo list<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ISP IP range filter in UFW\/FirewallD   +Pro simple  +Pro more narrow -Con takes more time\/effort to reverse engineer multiple ISP IP range<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"> <\/p>\n","protected":false},"excerpt":{"rendered":"<p>I have intentionally limited this list to solutions that are easy to use \/ have a web interface, because I need to document how to use and update this so&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[10,4],"class_list":["post-4470","post","type-post","status-publish","format-standard","hentry","category-uncategorised","tag-linux","tag-security"],"_links":{"self":[{"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts\/4470","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4470"}],"version-history":[{"count":2,"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts\/4470\/revisions"}],"predecessor-version":[{"id":4472,"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts\/4470\/revisions\/4472"}],"wp:attachment":[{"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4470"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4470"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4470"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}