[BlueOnyx:25314] Re: 5210r and iptables -> not working?

[Michael Stauber]

Hi Janwillem,

> Just saw in the shop that APF doesn’t use the GeoIP modulenon 5210, are 
> there alternatives?

On EL8 we sadly no longer have /etc/hosts.allow and /etc/hosts.deny, 
which was needed for the GeoIP-feature. That's why the APF on 5210R 
comes without it.

> If not I’ll setup a PfSense instance for that purpose.

Yeah, that might certainly be best if you can. You might still want 
Fail2ban and Firewalld on the 5210R itself, though. To block brute force 
login attempts.

-- 
With best regards

Michael Stauber