Skip to content

added possibility to create geoip based rules

Ghost User requested to merge (removed):geoip_policies into master

Description: Implements GeoIP based Policies

Requirements:

  • Net::DNS

Policy Groups: The pastebin http://pastebin.com/XcybDqqX contains sql queries which inserts each ISO country code in continent based policy groups

Configuration: GeoIP lookup are done over a country based dnsbl. The default is zz.countries.nerd.dk, but it is configurable with "geoip_dnsbl=zz.countries.nerd.dk" under the [server] namespace.

Example: policy_member: Source: %geoip_asia,$* Destination: any Matchs every sasl authenticated user from a asia country.

Merge request reports