I love the filter options for region blocking and curated block lists. Excellent work there! What is the best way to confirm said lists are working? I don’t see any way to enable alerts for blocks?
There isn’t currently any kind of alerts for blocks via blocklists (only for IDS/IPS). If you’d like to see if there are any hits, you can open a terminal your Route10 (Network tab hols shift+click on the Route10 name) and run the following to see any hits.
iptables -L banIP -n -v --line-numbers
If there are any hits, you should see packets increase on the pkts column.
Thank you for the workaround James! I’ll try that out this evening.
Would me nice for eye-candy to display globe and click countries to block/allow or create a object-group of “bad-actors” and select country codes. to a policy.
It doesn’t look like you’ve had any hits from blocked countries or other block lists. You’re basically looking for “pkts” for badactors_4 or country_4 to increase.
whitelist_4 should be IPs related to your ISP connection.You can check what’s listed with:
ipset list whitelist_4
You guys are awesome. Thank you soo much!