Is anyone blocking countries at the iptables level using a combination of xtables-addons and GeoIP on Debian Lenny? I've found a couple of tutorials on the web but they talk about altering the kernel to get it to work. Maybe this isn't a big deal - I don't know - it just that I've never done it before. I've seen the HowToForge tutorial on Blocking IPs but this adds a ton of rules to iptables (like 32,000) which is why I'm pursuing GeoIP. Any advice would be appreciated - thanks!