CentOS 6 iptables+GeoIP로 국가별 제한

본문

최저가 서버호스팅 제공 : 85,000원/월

CentOS 기본 방화벽인 iptables를 이용하여 국가별로 차단, 허용 설정을 하는 방법을 알아보겠습니다.

접속하는 PC가 고정IP를 사용하지 않아 특정IP만 접속을 하도록 설정하기 어려운 경우 FTP, SSH 접속만이라도 

국내에서만 접속이 가능하도록 허용해 두면 IP추적이 어려운 해외 IP에서의 무작위 접속을 방지하여 어느정도

해킹 예방에 도움이 되며 다양하게 응용이 가능합니다.

1. 설치 환경

* CentOS 6

* iptables 1.4.3 이상

* kernel-source 2.6.29 이상

2. 설치

### 필수 패키지 설치  ###

# yum install gcc gcc-c++ make automake unzip zip xz kernel-devel-`uname -r` iptables-devel

### perl-Text-CSV_XS 설치 (2가지)  ###

1) 직접 rpm으로 설치하는 방법

http://pkgs.repoforge.org/perl-Text-CSV_XS/ 에서 최신 버전을 확인하고 설치해줍니다.

# rpm -Uvh http://pkgs.repoforge.org/perl-Text-CSV_XS/perl-Text-CSV_XS-0.80-1.el6.rf.x86_64.rpm

2) rpmforge repo 를 추가하여 yum으로 설치하는 방법

# rpm -i http://packages.sw.be/rpmforge-release/rpmforge-release-0.5.2-2.el6.rf.i686.rpm

# yum install perl-Text-CSV_XS

### xtables-addons 설치 ###

소스를 다운 받습니다.

# wget http://downloads.sourceforge.net/project/xtables-addons/Xtables-addons/1.37/xtables-addons-1.37.tar.xz

압축을 풀어 줍니다.

# tar xvf xtables-addons-1.37.tar.xz

디렉토리로 들어가서 설치합니다.

# cd xtables-addons-1.37/

# ./configure

# make && make install

### GeoIP 모듈 세팅 ###

# cd geoip/

geoip 데이터를 다운받아 컴파일을 합니다.

# ./xt_geoip_dl

# ./xt_geoip_build GeoIPCountryWhois.csv

데이터를 기본 디렉토리로 이동합니다.

# mkdir -p /usr/share/xt_geoip/

# cp -r {BE,LE} /usr/share/xt_geoip/

3. iptables 설정 테스트

중국에서의 접근을 차단

# iptables -I INPUT -m geoip --src-cc CN -j DROP

한국 이외의 모든 국가를 차단

# iptables -I INPUT -p tcp -m geoip ! --src-cc KR -j DROP

한국에서만 SSH 접속을 허용

# iptables -I INPUT -p tcp --dport 22 -m geoip --src-cc KR -j ACCEPT

4. GeoIP Country Codes

A1,"Anonymous Proxy"

A2,"Satellite Provider"

O1,"Other Country"

AD,"Andorra"

AE,"United Arab Emirates"

AF,"Afghanistan"

AG,"Antigua and Barbuda"

AI,"Anguilla"

AL,"Albania"

AM,"Armenia"

AO,"Angola"

AP,"Asia/Pacific Region"

AQ,"Antarctica"

AR,"Argentina"

AS,"American Samoa"

AT,"Austria"

AU,"Australia"

AW,"Aruba"

AX,"Aland Islands"

AZ,"Azerbaijan"

BA,"Bosnia and Herzegovina"

BB,"Barbados"

BD,"Bangladesh"

BE,"Belgium"

BF,"Burkina Faso"

BG,"Bulgaria"

BH,"Bahrain"

BI,"Burundi"

BJ,"Benin"

BL,"Saint Bartelemey"

BM,"Bermuda"

BN,"Brunei Darussalam"

BO,"Bolivia"

BQ,"Bonaire, Saint Eustatius and Saba"

BR,"Brazil"

BS,"Bahamas"

BT,"Bhutan"

BV,"Bouvet Island"

BW,"Botswana"

BY,"Belarus"

BZ,"Belize"

CA,"Canada"

CC,"Cocos (Keeling) Islands"

CD,"Congo, The Democratic Republic of the"

CF,"Central African Republic"

CG,"Congo"

CH,"Switzerland"

CI,"Cote d'Ivoire"

CK,"Cook Islands"

CL,"Chile"

CM,"Cameroon"

CN,"China"

CO,"Colombia"

CR,"Costa Rica"

CU,"Cuba"

CV,"Cape Verde"

CW,"Curacao"

CX,"Christmas Island"

CY,"Cyprus"

CZ,"Czech Republic"

DE,"Germany"

DJ,"Djibouti"

DK,"Denmark"

DM,"Dominica"

DO,"Dominican Republic"

DZ,"Algeria"

EC,"Ecuador"

EE,"Estonia"

EG,"Egypt"

EH,"Western Sahara"

ER,"Eritrea"

ES,"Spain"

ET,"Ethiopia"

EU,"Europe"

FI,"Finland"

FJ,"Fiji"

FK,"Falkland Islands (Malvinas)"

FM,"Micronesia, Federated States of"

FO,"Faroe Islands"

FR,"France"

GA,"Gabon"

GB,"United Kingdom"

GD,"Grenada"

GE,"Georgia"

GF,"French Guiana"

GG,"Guernsey"

GH,"Ghana"

GI,"Gibraltar"

GL,"Greenland"

GM,"Gambia"

GN,"Guinea"

GP,"Guadeloupe"

GQ,"Equatorial Guinea"

GR,"Greece"

GS,"South Georgia and the South Sandwich Islands"

GT,"Guatemala"

GU,"Guam"

GW,"Guinea-Bissau"

GY,"Guyana"

HK,"Hong Kong"

HM,"Heard Island and McDonald Islands"

HN,"Honduras"

HR,"Croatia"

HT,"Haiti"

HU,"Hungary"

ID,"Indonesia"

IE,"Ireland"

IL,"Israel"

IM,"Isle of Man"

IN,"India"

IO,"British Indian Ocean Territory"

IQ,"Iraq"

IR,"Iran, Islamic Republic of"

IS,"Iceland"

IT,"Italy"

JE,"Jersey"

JM,"Jamaica"

JO,"Jordan"

JP,"Japan"

KE,"Kenya"

KG,"Kyrgyzstan"

KH,"Cambodia"

KI,"Kiribati"

KM,"Comoros"

KN,"Saint Kitts and Nevis"

KP,"Korea, Democratic People's Republic of"

KR,"Korea, Republic of"

KW,"Kuwait"

KY,"Cayman Islands"

KZ,"Kazakhstan"

LA,"Lao People's Democratic Republic"

LB,"Lebanon"

LC,"Saint Lucia"

LI,"Liechtenstein"

LK,"Sri Lanka"

LR,"Liberia"

LS,"Lesotho"

LT,"Lithuania"

LU,"Luxembourg"

LV,"Latvia"

LY,"Libyan Arab Jamahiriya"

MA,"Morocco"

MC,"Monaco"

MD,"Moldova, Republic of"

ME,"Montenegro"

MF,"Saint Martin"

MG,"Madagascar"

MH,"Marshall Islands"

MK,"Macedonia"

ML,"Mali"

MM,"Myanmar"

MN,"Mongolia"

MO,"Macao"

MP,"Northern Mariana Islands"

MQ,"Martinique"

MR,"Mauritania"

MS,"Montserrat"

MT,"Malta"

MU,"Mauritius"

MV,"Maldives"

MW,"Malawi"

MX,"Mexico"

MY,"Malaysia"

MZ,"Mozambique"

NA,"Namibia"

NC,"New Caledonia"

NE,"Niger"

NF,"Norfolk Island"

NG,"Nigeria"

NI,"Nicaragua"

NL,"Netherlands"

NO,"Norway"

NP,"Nepal"

NR,"Nauru"

NU,"Niue"

NZ,"New Zealand"

OM,"Oman"

PA,"Panama"

PE,"Peru"

PF,"French Polynesia"

PG,"Papua New Guinea"

PH,"Philippines"

PK,"Pakistan"

PL,"Poland"

PM,"Saint Pierre and Miquelon"

PN,"Pitcairn"

PR,"Puerto Rico"

PS,"Palestinian Territory"

PT,"Portugal"

PW,"Palau"

PY,"Paraguay"

QA,"Qatar"

RE,"Reunion"

RO,"Romania"

RS,"Serbia"

RU,"Russian Federation"

RW,"Rwanda"

SA,"Saudi Arabia"

SB,"Solomon Islands"

SC,"Seychelles"

SD,"Sudan"

SE,"Sweden"

SG,"Singapore"

SH,"Saint Helena"

SI,"Slovenia"

SJ,"Svalbard and Jan Mayen"

SK,"Slovakia"

SL,"Sierra Leone"

SM,"San Marino"

SN,"Senegal"

SO,"Somalia"

SR,"Suriname"

SS,"South Sudan"

ST,"Sao Tome and Principe"

SV,"El Salvador"

SX,"Sint Maarten"

SY,"Syrian Arab Republic"

SZ,"Swaziland"

TC,"Turks and Caicos Islands"

TD,"Chad"

TF,"French Southern Territories"

TG,"Togo"

TH,"Thailand"

TJ,"Tajikistan"

TK,"Tokelau"

TL,"Timor-Leste"

TM,"Turkmenistan"

TN,"Tunisia"

TO,"Tonga"

TR,"Turkey"

TT,"Trinidad and Tobago"

TV,"Tuvalu"

TW,"Taiwan"

TZ,"Tanzania, United Republic of"

UA,"Ukraine"

UG,"Uganda"

UM,"United States Minor Outlying Islands"

US,"United States"

UY,"Uruguay"

UZ,"Uzbekistan"

VA,"Holy See (Vatican City State)"

VC,"Saint Vincent and the Grenadines"

VE,"Venezuela"

VG,"Virgin Islands, British"

VI,"Virgin Islands, U.S."

VN,"Vietnam"

VU,"Vanuatu"

WF,"Wallis and Futuna"

WS,"Samoa"

YE,"Yemen"

YT,"Mayotte"

ZA,"South Africa"

ZM,"Zambia"

ZW,"Zimbabwe"

국내 최저가 네이버클라우드 서버 제공 : 88,000원/월

관련자료

• 이전
  webmail roundcube 설치

  작성일 2014.07.16 11:47
• 다음
  lsof 사용하기

  작성일 2014.07.03 14:29