connection-blocker

Script to limit SSH and other types of connections to specified countries.

Usage

blocker.py {service name} {ip}

When country is valid, script returns exit status 0, otherwise 1.

Installation

• Install packages:

apt-get install geoip-bin geoip-database python-geoip

• Clone project repository into /scripts:

mkdir -p /scripts
cd /scripts
git clone https://github.com/1connect/connection-blocker.git

• Add the following line to /etc/hosts.allow:

ALL: ALL: aclexec /scripts/connection-blocker/blocker.py %d %a

• Then add to /etc/hosts.deny:

ALL: ALL