Blocking access to the server from different countries?

Question

linux

Looking for a way to block ports for different countries. So far, all I've come up with is adding address ranges to iptables with a script, but it seems to me difficult to maintain and it would be ideal if someone else semi-technical could manage such access. Please share your experience)
OS - Centos 6.8

Answer 1

There is a module for iptables that allows you to block by country, here is an installation example: i-notes.org/centos-6-iptables-ustanovka-xtables-ad...
Semi- technical people should NOT give this to their hands :)

Answer 2

Use ipset+iptables, solutions are googled in 2 minutes.

Answer 3

Install csf and don't worry, it will be much easier to block both IP and entire subnets.