View Single Post
Old 16th November 2010, 22:30
drewb0y drewb0y is offline
Senior Member
Join Date: Sep 2010
Posts: 103
Thanks: 10
Thanked 14 Times in 7 Posts

Originally Posted by biggdog View Post
Yes I did do an iptables -L twice as I was not quite sure what I was looking at but your answer about only adding in the last line once gives me my answer. I think.

How about this now. Please notice the begining and the end. I have also added a possible save directory for this string. I got this from another site I use the person goes by "mr88talent"

Let me know if this could work while I am using ispconfig 3 debian lenny 5.06 amd64.


All should Be good
Looks like it should work to me. That is a lot of countries to reject, but I guess I am rejecting a lot as well at 28 currently. Have you been able to verify that without doing the steps below the changes to iptables are not persistent on reboot?

iptables-save > /etc/GEOIP_REJECT
iptables-restore < /etc/GEOIP_REJECT

vi /etc/network/interfaces

And insert the following text in the blank line just below "iface lo inet loopback":
pre-up iptables-restore < /etc/GEOIP_REJECT
ISPConfig - The Perfect Server - Debian Wheezy (nginx, BIND, Dovecot, ISPConfig 3)
Installed on Debian 7.6 on a KVM VPS
Reply With Quote