https://bugs.contribs.org/show_bug.cgi?id=10749

--- Comment #2 from mab974 <[email protected]> ---
(In reply to Jean-Philippe Pialasse from comment #1)
> XT_GEOIP_MAX = 15,    /* Maximum of countries */
> 
> cf
> 
> https://github.com/tinti/xtables-addons/blob/
> 5e54dea2bdd977cd306a68a3a4dbf92fc123b5ee/extensions/xt_geoip.h
> 
> sed -i "s#XT_GEOIP_MAX = 15#XT_GEOIP_MAX = 50#g" ./extensions/xt_geoip.h
> 
> - 3 options from there:
> 1- replace 15 to 50 in source and recompile 
> 2- change code to move the lines to another chain and add a line per country
> 3- allow a reverse match drop all but 
> iptables -I INPUT ! -i lo -m geoip ! --src-cc RU -j DROP

Option 2 could be the best:
no future limitation and possibility of retrieving the country code directly
from the log file.
But I can't appreciate the impact in terms of performance between the different
options.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
_______________________________________________
Mail for each SME Contribs bug report
To unsubscribe, e-mail [email protected]
Searchable archive at https://lists.contribs.org/mailman/public/contribteam/

Reply via email to