[BlueOnyx:25833] BlueOnyx 5210R/5211R: Updated "Firewall" Package in the shop

[Michael Stauber]

Hi all,

The shop package "Firewall" (provides a GUI for Firewalld) has just been 
released for 5210R and 5211R in an updated version.

The new version finally adds the ability again to quickly and easily 
block access to your server for entire countries. Don't like the Chinese 
botnets hammering your server? Just tick the checkbox "CN" under "Server 
Management" / "Security" / "Firewalld" in the tab "Blacklist" and the 
GUI takes care of it by blocking all known Chinese IPv4 and IPv6 IP 
address ranges. Or if you don't particularly like any other country? 
There's plenty of checkboxes for everyone.

The IP address ranges are kindly provided by https://www.ipdeny.com/ and 
an included script downloads the zone files for the selected countries 
and aggregates them into IP-Sets that firewalld can handle easily.

To not put undue stress on the download servers of www.ipdeny.com I 
mirror their zone files on updates.blueonyx.it (their generous license 
allows for this - many thanks!) and the GUI scripts pull these zone 
files from the BlueOnyx update servers instead.

-- 
With best regards

Michael Stauber