Whitelist countries?

[Bamsefar]

So we have things like blacklist countries - what about the opposite?

I would love to be able to say which countries are allowed = whitelist instead of blacklist. Would make this so much easier....

 

[Adamm]

So we have things like blacklist countries - what about the opposite?

I would love to be able to say which countries are allowed = whitelist instead of blacklist. Would make this so much easier....

I see the theory, but I'm not sure how great this would work. It's possible sure, but that's a very wide net your casting only allowing lets say traffic from the USA and potentially blocking billions of IP's. I'm sure its bound to break loads of things

 

[System Error Message]

whitelisting countries, bad idea. For example amazon aws has a lot of malware sites and thats in the US too. whitelisting = exposing ports. Router is basically a linux computer running services.

 

[Bamsefar]

whitelisting countries, bad idea. For example amazon aws has a lot of malware sites and thats in the US too. whitelisting = exposing ports. Router is basically a linux computer running services.

So what do you think you are doing now instead? I'd say basic firewall is close EVERYTHING and then open. Your solution is way more bad.

 

[System Error Message]

So what do you think you are doing now instead? I'd say basic firewall is close EVERYTHING and then open. Your solution is way more bad.

block on WAN, if there is attempted input not initiated by router first i set the firewall to blacklist the ip. This way any exposed services like vpn server for instance dont get hacked. I've been running my router's vpn server without a password and there has been no attempt at trying to login, ofcourse my router's blacklisted IP addresses number in the many thousands, easily reaching up to 100k+ ip addresses from time to time