Firewall - blocks traffic from a specific country - Enhance Control Panel

Firewall - blocks traffic from a specific country

DracoBlue

You can block access from specific countries by implementing IP blocking. Given the frequent attacks from Russia, Ukraine, and China, you may want to consider using a firewall or server configuration to restrict access from IP addresses originating in these countries. This can help mitigate potential security threats and attacks on your website.

twest

I always block those 3 from Cloudflare, it helps a lot!

From what I've read about the subject years and years ago, it's not feasible to add a country block at the local level due to the huge number of IPs that need to be managed and updated in a block list. Like it will degrade system performance by a lot.

JohnB

twest Wordfence Premium can block countries. iptables can too for example: https://feldspaten.org/2022/02/26/Blocking-country-by-IP-space/ but as they warn with huge blocklists it can get slow to launch.

DracoBlue

Yes, only then does the page have to go through Cloudflare proxy for it to work?

twest

DracoBlue yes I believe the proxy has to be enabled for the security tools to work.

Shaijee

This is a good feature; however, it's easily and effectively managed from CloudFlare. I usually do it. CF blocks them before they reach the server, so it's secure as well. I don't think it's worth spending time on it, unless in the future. I am eagerly awaiting the email features on the roadmap.

thisisviniciusnascimento

I think this causes a huge load on servers with few resources, the ideal would be to manage via cloudflare or bitninja for example.

SharedGrid

thisisviniciusnascimento bitninja for example.

BitNinja runs locally for this kind of thing, therefore that wouldn't reduce server load.

Shaijee

thisisviniciusnascimento I think this causes a huge load on servers with few resources, the ideal would be to manage via cloudflare or bitninja for example.

How can Bitninja solve this problem without causing server load, given that it runs on the server itself?

thisisviniciusnascimento

SharedGrid Well, that's a problem.

thisisviniciusnascimento

Shaijee I meant to say that his protection didn't please me.

opsshield

cPGuard also can do this using the IPDB module. The latest version comes up with stats to show the countries from which most attacks are coming from, just in case you need a decision parameter to block a country.