iptables geo filter rules?

Question

linux

Help solve the problem, block all countries except one, using the ip range! xtables I already tried it skips packets.
OS: Centos 6.7
IPTABLES: 1.4.7

Answer 1

If you do not drive with geoip modules, then you need ipset

ipset -N %country% hash:net
wget -P . http://www.ipdeny.com/ipblocks/data/countries/%country%.zone
for i in $(cat /etc/%country%.zone ); do ipset -A %country% $i; done
iptables -P INPUT DROP
iptables -A INPUT -p tcp -m set --match-set %country% src -j ACCEPT

this is what it looks like to me

Answer 2

Google "geo filter iptables"