====== Firewall - DNS-based filtering ======

[[Firewall:DNS-based filtering|DNS-based filtering]]

----

===== GeoIP Blocking =====

GeoIP Blocking reduces the number of computers that can attack.

<WRAP important>
**WARNING:**  GeoIP Blocking is not perfect, as attackers spoof IP addresses to look like they are coming from safer countries.
</WRAP>

----

===== MaxMind =====

Consider the MaxMind GeoIP database.

  * Registration is needed to create a license key; which is free.

https://download.maxmind.com/app/geoip_download?edition_id=GeoLite2-Country-CSV&license_key=My_License_Key&sufix=zip

<WRAP info>
**NOTE:**  This downloads the list and allows you to deny any traffic from those regions.
</WRAP>





----