Blocking Based on Country with GeoIP, xtables-addons, and iptables

[linus3x]

Is anyone blocking countries at the iptables level using a combination of xtables-addons and GeoIP on Debian Lenny?

I've found a couple of tutorials on the web but they talk about altering the kernel to get it to work. Maybe this isn't a big deal - I don't know - it just that I've never done it before.

I've seen the HowToForge tutorial on Blocking IPs but this adds a ton of rules to iptables (like 32,000) which is why I'm pursuing GeoIP.

Any advice would be appreciated - thanks!

[falko]

I've never tried this, so I can't tell if this is possible and how it would work.