TID: FMail-lnx64 2.3.2.4-B20240523   
   RFC-X-No-Archive: Yes   
   TZUTC: 0100   
   CHRS: CP850 2   
   PID: GED+LNX 1.1.5-b20240306   
   MSGID: 2:280/464 67c1edf7   
   REPLY: 53753.sync@1:103/705 2c27e2fc   
   Hi Compctech,   
      
   On 2025-02-28 10:47:03, you wrote to All:   
      
    Co> I apologies if I am posting in the wrong location.  I am getting a lot   
    Co> of login attempts from China and other Asian countries.  It does not   
    Co> surprise me, but has anyone tried doing IP blocking by country,  I   
    Co> don't like the idea, but with as much attempts I am getting, it's   
    Co> filling up my logs. I see how I can do it with UFW, but just need a   
    Co> good source of IP Blocks.  CIDR notations would be great.   
      
   Yes you can get the IP block ranges by country at http://www.ipdeny.com/   
      
   For example I do this in a script for some countries (not my fido machine   
   though, because there are a lot of fido systems in russia):   
      
   wget -q -O zone.belarus     http://www.ipdeny.com/ipblocks/data/   
   ggregated/by-aggregated.zone   
   wget -q -O zone.china       http://www.ipdeny.com/ipblocks/data/   
   ggregated/cn-aggregated.zone   
   wget -q -O zone.iran        http://www.ipdeny.com/ipblocks/data/   
   ggregated/ir-aggregated.zone   
   wget -q -O zone.north-korea http://www.ipdeny.com/ipblocks/data/   
   ggregated/kp-aggregated.zone   
   wget -q -O zone.russia      http://www.ipdeny.com/ipblocks/data/   
   ggregated/ru-aggregated.zone   
      
   After this I feed the files to fail2ban with these commands:   
      
   fail2ban-client restart --unban countries   
   fail2ban-client set countries banip $(