Posted: Sun Mar 08, 2026 5:42 Post subject: Server Blocking By Country Use/Hardening?
What is the function supposed to be and how are you supposed to correctly use the section labeled "Server Blocking by Country" in Access Restriction -> WAN Access?
I have searched and haven't found anything that clearly documents/explains this. Standard country codes don't appear to do anything.
Is there a simple way to geoblock? A large amount of problematic access attempts come from a fairly short list of countries.
Also is there any log system that flags IP's from behavioral analysis or like an opnsense "lite" version if that makes sense?
Any integration with various threat intelligence feeds?
I would appreciate any insights and apologies if these are dumb questions.[/img]
Joined: 16 Nov 2015 Posts: 7161 Location: UK, London, just across the river..
Posted: Sun Mar 08, 2026 6:35 Post subject:
Not long ago I did try this option and it was bugging my XR500 to a point of no internet...at all
I used/tried with capital letters or small, and selected very few country codes...or just one _________________ Atheros
TP-Link WR1043NDv2 -DD-WRT 62606 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear R7800 -OpenWRT Kong 25.12
Netgear XR500 -DD-WRT 64453 GTW/SmDNS/DoT,AD-Blk,Forced DNS,AP&Net Isolation,x2VLAN,Vanilla
Netgear R7800 --DD-WRT 64453 Gateway/DNSCryptv2,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla,VPN cli
Netgear R9000 --DD-WRT 64137 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Dynalink DL-WRX36-DDWRT 64137
Broadcom
Netgear R7000 --DD-WRT 64453 GTW/DNScrypt-proxy2/AD-Block,IPset Firewall,Forced DNS,x4VLAN,VPN cli
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913
Joined: 16 Nov 2015 Posts: 7161 Location: UK, London, just across the river..
Posted: Sun Mar 08, 2026 11:14 Post subject:
on My R7000(63790) Tried few and still the same result, router is not operational, loosing WiFi connectivity while wired is working, but no Internet...so link the dots...noting in the logs...
tried iso alpha 2: CN, IR, IN, IL or the same without intervals..same result..so this option is not working for me... _________________ Atheros
TP-Link WR1043NDv2 -DD-WRT 62606 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear R7800 -OpenWRT Kong 25.12
Netgear XR500 -DD-WRT 64453 GTW/SmDNS/DoT,AD-Blk,Forced DNS,AP&Net Isolation,x2VLAN,Vanilla
Netgear R7800 --DD-WRT 64453 Gateway/DNSCryptv2,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla,VPN cli
Netgear R9000 --DD-WRT 64137 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Dynalink DL-WRX36-DDWRT 64137
Broadcom
Netgear R7000 --DD-WRT 64453 GTW/DNScrypt-proxy2/AD-Block,IPset Firewall,Forced DNS,x4VLAN,VPN cli
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913
nor anything shows filtered packets (access restrictions) for the policy so, no idea how those work if work at all, range is selected and mac address too, along with few risk, L7 and other services to filter/block... _________________ Atheros
TP-Link WR1043NDv2 -DD-WRT 62606 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear R7800 -OpenWRT Kong 25.12
Netgear XR500 -DD-WRT 64453 GTW/SmDNS/DoT,AD-Blk,Forced DNS,AP&Net Isolation,x2VLAN,Vanilla
Netgear R7800 --DD-WRT 64453 Gateway/DNSCryptv2,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla,VPN cli
Netgear R9000 --DD-WRT 64137 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Dynalink DL-WRX36-DDWRT 64137
Broadcom
Netgear R7000 --DD-WRT 64453 GTW/DNScrypt-proxy2/AD-Block,IPset Firewall,Forced DNS,x4VLAN,VPN cli
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913
Joined: 16 Nov 2015 Posts: 7161 Location: UK, London, just across the river..
Posted: Tue Mar 17, 2026 18:52 Post subject:
kernel-panic69 wrote:
I saw some commits related to country codes that may be involved in fixing it earlier. You know that new features sometimes take some time to get the kinks unkinked.
o yea...i would love to trade country codes towards fixing of SmartDNS...indeed _________________ Atheros
TP-Link WR1043NDv2 -DD-WRT 62606 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear R7800 -OpenWRT Kong 25.12
Netgear XR500 -DD-WRT 64453 GTW/SmDNS/DoT,AD-Blk,Forced DNS,AP&Net Isolation,x2VLAN,Vanilla
Netgear R7800 --DD-WRT 64453 Gateway/DNSCryptv2,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla,VPN cli
Netgear R9000 --DD-WRT 64137 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Dynalink DL-WRX36-DDWRT 64137
Broadcom
Netgear R7000 --DD-WRT 64453 GTW/DNScrypt-proxy2/AD-Block,IPset Firewall,Forced DNS,x4VLAN,VPN cli
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913
