Block Geo-Region List of IPs with ufw in Linux – Scott Miller

Say for instance you wish to block IP ranges by region such as blocking China. This is easy to do with one spiffy website and ufw in Ubuntu or other Linux distros. I’ll show you how!

1. First, get a list of IP address of a region you wish to block. One website that provides this is:
http://www.ip2location.com/free/visitor-blocker

Select iptables, China (or whichever country), CIDR format, and Download.

The list will look something like the following, with ranges in CIDR format one on a line. Save as say, cdir-china.txt. I would also recommend testing this list out in a non-prod environment first! These are generally accurate lists but be very careful and use with caution.

2. Next, carefully run the following command to block all ranges in that list:

For a large list (say, the china list) it may take several minutes to run.

3. When complete, you can then run the following to verify the rules are in place:

To remove or revert these rules, keep that list of IPs! Then run a command like so to remove the rules:

Source: Block Geo-Region List of IPs with ufw in Linux by Scott Miller

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.