Atomicorp

Ukraine is geoblocked, but I would like to allow a single IP thru, without whitelisting it. Is this possible?

Thanks in advance.

Is it for just one service, or multiple ones?

scott wrote:Is it for just one service, or multiple ones?

only for port 443 and 22.

You could insert firewall rules in INPUT before ASL-GEO-BLACKLIST .

Thats definitely one way, another is to do 2 per-port ACL's

So one firewall rule in INPUT before geoblock allowing access to those two ports?

Right, an "insert" means put on the top of a list, and "add" means add to the bottom. Just like you're in a spreadsheet. You want your rule to appear ahead of the drop rule.

scott wrote:Right, an "insert" means put on the top of a list, and "add" means add to the bottom. Just like you're in a spreadsheet. You want your rule to appear ahead of the drop rule.

how do i add more than one port per rule? tried space, comma without spaces and dashes.

Per port ACLs documentation is available here:

https://www.atomicorp.com/wiki/index.ph ... _Port_ACLs

mikeshinn wrote:Per port ACLs documentation is available here:

https://www.atomicorp.com/wiki/index.ph ... _Port_ACLs

thanks, but the referenced "Per Port ACLs" section does not mention the syntax for multiple ports.

additionally, i was looking to do this via the GUI, IF possible.

That mechanism is for single ports at a time, so you'd need to make 2 lists.