Knowledgebase

Deny Countries to All Ports

Deny whole country CIDR ranges. The CIDR blocks are generated from the Maxmind GeoLite2 Country database and entirely relies on that service being available. You must sign up for the free MaxMind license key. IPset must be supported and loaded by the kernel if you want to block a lot of countries.

1. Navigate to Juggernaut Firewall -> Settings -> Login Failure Daemon -> Country Settings.
2. Add some countries to Deny countries to all ports.
3. If IPV6 is enabled on the server then make sure to check the IPv6 address lookups option so that we also lookup IPv6 networks.
4. Click the Update button to save your settings.
5. Click the Restart button to restart the firewall and login failure daemon.

Deny Countries to Specific Ports

Deny access from the following countries to specific ports listed in CC_DENY_PORTS_TCP and CC_DENY_PORTS_UDP. You must sign up for the free MaxMind license key.

1. Navigate to Juggernaut Firewall -> Settings -> Login Failure Daemon -> Country Settings.
2. If IPV6 is enabled on the server then make sure to check the IPv6 address lookups option so that we also lookup IPv6 networks.
3. Add some countries to Deny countries to ports.
4. Add the ports you want to block to Deny countries to TCP ports AND Deny countries to UDP ports.
5. Click the Update button to save your settings.
6. Click the Restart button to restart the firewall and login failure daemon.