Block countries - Nginx

[basti]

Hello,
if you have access to this load balancer, the best way would be to block
it there. This also drop down the system load on your load balancer.

Am 22.05.2018 um 03:37 schrieb Sathish Kumar:
> Hi All,
> 
> Is there a way, I can block the clients which is coming through load
> balancer using http geo ip module nginx.
> 
> 
> Currently, I can block the clients which is not coming through load
> balancer or api gateway by geo ip module.
> 
> 
> 
> 
> On Mon, May 21, 2018, 2:02 PM basti <mailinglist at unix-solution.de
> <mailto:mailinglist at unix-solution.de>> wrote:
> 
>     hello,
>     the way to block ip's can also be used for PTR records, I think.
>     Also as wildcard.
> 
>     On 21.05.2018 05:49, Sathish Kumar wrote:
>     > Hi All,
>     >
>     > I have a requirement to block certain countries coming to our
>     website. 
>     > I managed to achieved it using the ngx_http_geoip_module. I have a
>     > problem now, if the request comes through Amazon API Gateway, how
>     can I
>     > read the X-forwarded-for header or block these request too.
>     >
>     > nginx.conf
>     > map $geoip_country_code $allow_country {
>     >  default yes; 
>     > SG no; 
>     > }
>     >
>     >
>     > geoip_country /etc/nginx/GeoIP.dat; # the country IP database 
>     > geoip_city /etc/nginx/GeoLiteCity.dat; # the city IP database
>     >
>     >
>     > domain.conf
>     > if ($allow_country = no) { 
>     > return 444; 
>     > }
>     >
>     > Thanks & Regards
>     > Sathish.V
>     >
>     >
>     > _______________________________________________
>     > nginx mailing list
>     > nginx at nginx.org <mailto:nginx at nginx.org>
>     > http://mailman.nginx.org/mailman/listinfo/nginx
>     >
>     _______________________________________________
>     nginx mailing list
>     nginx at nginx.org <mailto:nginx at nginx.org>
>     http://mailman.nginx.org/mailman/listinfo/nginx
> 
> 
> 
> _______________________________________________
> nginx mailing list
> nginx at nginx.org
> http://mailman.nginx.org/mailman/listinfo/nginx
>