home.social

#iiptables — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #iiptables, aggregated by home.social.

  1. On Friday I made a change to prod on my home server. It is now only accessible from Aussie IP addresses. Previously only a couple of countries were blocked. I'm using a combination of #geoipset, #ipset & #iiptables. If you are considering doing this yourself be aware of three things:
    - don't forget to allow the local network access
    - you will need to keep this updated as apparently addresses can change countries.
    - expect a couple of things to break. Making the change on Friday gave me the weekend to discover what I borked. So far it appears only updates - for some odd reason that was using an off-shore source. This was easy enough to fix.

    #selfhosting

  2. On Friday I made a change to prod on my home server. It is now only accessible from Aussie IP addresses. Previously only a couple of countries were blocked. I'm using a combination of #geoipset, #ipset & #iiptables. If you are considering doing this yourself be aware of three things:
    - don't forget to allow the local network access
    - you will need to keep this updated as apparently addresses can change countries.
    - expect a couple of things to break. Making the change on Friday gave me the weekend to discover what I borked. So far it appears only updates - for some odd reason that was using an off-shore source. This was easy enough to fix.

    #selfhosting

  3. On Friday I made a change to prod on my home server. It is now only accessible from Aussie IP addresses. Previously only a couple of countries were blocked. I'm using a combination of #geoipset, #ipset & #iiptables. If you are considering doing this yourself be aware of three things:
    - don't forget to allow the local network access
    - you will need to keep this updated as apparently addresses can change countries.
    - expect a couple of things to break. Making the change on Friday gave me the weekend to discover what I borked. So far it appears only updates - for some odd reason that was using an off-shore source. This was easy enough to fix.

    #selfhosting

  4. On Friday I made a change to prod on my home server. It is now only accessible from Aussie IP addresses. Previously only a couple of countries were blocked. I'm using a combination of #geoipset, #ipset & #iiptables. If you are considering doing this yourself be aware of three things:
    - don't forget to allow the local network access
    - you will need to keep this updated as apparently addresses can change countries.
    - expect a couple of things to break. Making the change on Friday gave me the weekend to discover what I borked. So far it appears only updates - for some odd reason that was using an off-shore source. This was easy enough to fix.

    #selfhosting

  5. On Friday I made a change to prod on my home server. It is now only accessible from Aussie IP addresses. Previously only a couple of countries were blocked. I'm using a combination of #geoipset, #ipset & #iiptables. If you are considering doing this yourself be aware of three things:
    - don't forget to allow the local network access
    - you will need to keep this updated as apparently addresses can change countries.
    - expect a couple of things to break. Making the change on Friday gave me the weekend to discover what I borked. So far it appears only updates - for some odd reason that was using an off-shore source. This was easy enough to fix.

    #selfhosting