3 ms·
OPNsense supports blocklists in Unbound: https://docs.opnsense.org/manual/unbound.html#blocklists https://docs.opnsense.org/manual/unbound.html#blocklists Howe
by LeoPanthera 3y ago
OPNsense supports blocklists in Unbound: https://docs.opnsense.org/manual/unbound.html#blocklists https://docs.opnsense.org/manual/unbound.html#blocklists
However what you're saying doesn't make any sense. All incoming connections, from anywhere, are blocked by default. That's true in both pfSense and OPNsense.
Are you saying that you allow all incoming connections, but then block specific countries? Because that's mad, and given the existence of VPNs, pointless.
- alias_neo 3y agoNo, there is a feature in Pfsense with Pf-Blocker-NG where you can open a port to a service as usual, say a web-server, then use an alias for the source address to only allow incoming connections from, say, your own country. Useful for if you're roaming around and need access to that service from your laptop/mobile without a VPN, but also prevents attacks from countries you're unlikely to access it from.