Is anyone blocking countries at the iptables level using a combination of xtables-addons and GeoIP on Debian Lenny? I've found a couple of tutorials on the web but they talk about altering the kernel to get it to work. Maybe this isn't a big deal - I don't know - it just that I've never done it before. I've seen the HowToForge tutorial on Blocking IPs but this adds a ton of rules to iptables (like 32,000) which is why I'm pursuing GeoIP. Any advice would be appreciated - thanks!
I have followed step by step in this tutorial, everything is describe, how to install and use iptables with geoip to block countries. http://terminal28.com/how-to-block-countries-using-iptables-debian/