How to block IP address by country range using ipset?

[krstopa]

I need to block web traffic from a certain country. I can export a free IP address list using IP2Location firewall list generator. The sample output format in CIDR is as below. There are other formats but I'm not sure if it is supported by ipset or not.

What should I do next to import the list to enable blocking using ipset? I don't want to enter it manually. I prefer a simple script to load all IP addresses and blocking them.

# -------------------------------------------------------
# Free IP2Location Firewall List by Country
# Source: https://www.ip2location.com/free/visitor-blocker
# Last Generated: 21 Nov 2018 11:20:13 GMT
# [Important] Please update this list every month
# -------------------------------------------------------
154.127.96.135/32
192.245.148.0/24
193.41.146.0/23
193.194.64.0/19
193.251.144.0/24
193.251.152.0/24

 

[Lazydog]

Look at fail2ban for their ipset script. With that and a bit of modification you should be able to import the list.

 

[Rob]

I wrote up how to do this using csf on one of my old websites..
http://www.linuxbrigade.com/block-countries-from-your-server-easily-with-csf/

If you're using cpanel, you can use that instead:
http://www.linuxbrigade.com/block-countries-using-mod_geoip-in-cpanel/