The CIDR blocks are generated from the # MaxMind GeoLite2 Country database at: # https://dev.MaxMind.com/geoip/geoip2/geolite2/ # This feature relies entirely on that service being available # # Specify the the two-letter ISO Country Code(s). The iptables rules are for # incoming ...
The CIDR blocks are generated from the # MaxMind GeoLite2 Country database at: # https://dev.MaxMind.com/geoip/geoip2/geolite2/ # This feature relies entirely on that service being available # # Specify the the two-letter ISO Country Code(s). The iptables rules are for # incoming ...
例如:comment (备注匹配),string(字符串匹配,可以用做内容过滤),iprang(ip范围匹配),time(时间匹配),ipp2p(点对点匹配),connlimit(同时连接个数匹配),Nth(第n个包匹配),geoip(根据国家地区匹配). quota(配额匹配) -m state --state established,invalid,new,related -m string -m connlimit --connlimit-ab...