Geoblock country but allow IP

[gaia]

Ukraine is geoblocked, but I would like to allow a single IP thru, without whitelisting it. Is this possible?

Thanks in advance.

[scott]

Is it for just one service, or multiple ones?

[gaia]

Is it for just one service, or multiple ones?

only for port 443 and 22.

[prupert]

You could insert firewall rules in INPUT before ASL-GEO-BLACKLIST .

[scott]

Thats definitely one way, another is to do 2 per-port ACL's

[gaia]

So one firewall rule in INPUT before geoblock allowing access to those two ports?

[scott]

Right, an "insert" means put on the top of a list, and "add" means add to the bottom. Just like you're in a spreadsheet. You want your rule to appear ahead of the drop rule.

[gaia]

Right, an "insert" means put on the top of a list, and "add" means add to the bottom. Just like you're in a spreadsheet. You want your rule to appear ahead of the drop rule.

how do i add more than one port per rule? tried space, comma without spaces and dashes.

[mikeshinn]

Per port ACLs documentation is available here:

https://www.atomicorp.com/wiki/index.ph ... _Port_ACLs

[gaia]

Per port ACLs documentation is available here:

https://www.atomicorp.com/wiki/index.ph ... _Port_ACLs

thanks, but the referenced "Per Port ACLs" section does not mention the syntax for multiple ports.

additionally, i was looking to do this via the GUI, IF possible.

[scott]

That mechanism is for single ports at a time, so you'd need to make 2 lists.