centos7 iptables geoip 설치 및 적용

# yum -y install perl-NetAddr-IP iptables-devel perl-Text-CSV_XS kernel-devel

# wget mirror.koreaidc.com/iptables/xtables-addons-2.10.tar.gz

xtables-addons-2.10

0.00MB

# tar xvfz xtables-addons-2.10.tar.gz

# cd xtables-addons-2.10/

# vi mconfig


주석처리
#build_TARPIT=m

# ./configure

# make && make install

728x90

cat /tmp/GeoLite2-Country-Blocks-IPv.csv | ./20_convert_geolite2 /tmp/CountryInfo.txt > GeoIP-legacy.csv

# ./00_download_geolite2

자동다운로드 막혀서 안되기때문에 아래 파일 다운로드

GeoLite2-Country-CSV_20201117.zip

0.00MB

# ./10_download_countryinfo 

# cat ./GeoLite2-Country-Blocks-IPv.csv | ./20_convert_geolite2 /tmp/CountryInfo.txt > GeoIP-legacy.csv

# yum install perl-CPAN.noarch

# perl -MCPAN -e shell

install NetAddr::IP

install Getopt::Long

quit

./xt_geoip_build GeoIP-legacy.csv

# mkdir -p /usr/share/xt_geoip

# cp -a BE /usr/share/xt_geoip/

# cp -a LE /usr/share/xt_geoip/

# iptables -I INPUT -m geoip --src-cc CN -j DROP

# iptables -I INPUT -m geoip --src-cc DE -j DROP

참고 : https://xinet.kr/?p=2132