{"id":1326,"date":"2014-11-11T22:37:11","date_gmt":"2014-11-12T04:37:11","guid":{"rendered":"http:\/\/blog.supportpro.com\/?p=1326"},"modified":"2026-04-02T00:23:22","modified_gmt":"2026-04-02T06:23:22","slug":"how-to-blockallow-traffic-to-a-website-from-certain-countries","status":"publish","type":"post","link":"https:\/\/www.supportpro.com\/blog\/how-to-blockallow-traffic-to-a-website-from-certain-countries\/","title":{"rendered":"How to Block\/Allow traffic to a website from certain countries"},"content":{"rendered":"

If you inspect your server’s error logs, you may see that many visitors (for the most part robots) constantly request access to things they should not be allowed to see. If you see that such access are suspicious and they are trying to spam your forum or hijack your mail program, you may need to deny access from those IP’s.<\/span><\/p>\n

Collecting such offending IP addresses by manually inspecting your logs across your site can become a full-time job.<\/p>\n

In such cases, you may block access to the site on Country basis (from which the suspicious access was observed) , given that the site have very few legitimate visitors from these regions.<\/p>\n

It can be done by using the mod_geoip<\/strong> apache module.<\/p>\n

What is Mod_geoip
\n==============<\/p>\n

Mod_geoip is a module for fast ip\/location lookups. It uses MaxMind GeoIP \/ GeoCity databases. If the IP was found in the database the module sets the appropriate environments variables to the request, thus making other modules\/fcgi be informed. In short, Mod_GeoIP module is used to get the geographic location of IP address of the visitor into the Apache web server. This module allows you to determine the visitor\u2019s country, organization and location.<\/p>\n

Installing and configuring mod_geoip apache module.
\n======================================<\/p>\n

By following the below few simple steps, we can install and configure mod_geoip apache module in the server and restrict access to the websites on a country basis.<\/p>\n

#yum install GeoIP GeoIP-devel GeoIP-data zlib-devel mod_geoip<\/em><\/p>\n

#cd \/var\/lib<\/em><\/p>\n

#wget http:\/\/geolite.maxmind.com\/download\/geoip\/database\/GeoLiteCountry\/GeoIP.dat.gz<\/em><\/p>\n

#gunzip GeoIP.dat.gz<\/em><\/p>\n

Open \/etc\/httpd\/conf.d\/geoip.conf and paste below code:<\/p>\n

==========
\nLoadModule geoip_module modules\/mod_geoip.so
\n<IfModule mod_geoip.c>
\nGeoIPEnable On
\nGeoIPDBFile \/var\/lib\/GeoIP.dat
\n<\/IfModule>
\n==========<\/p>\n

#\/etc\/init.d\/apache restart<\/em><\/p>\n

Now the Mod_geoip module is installed and enabled in the server.<\/p>\n

Now lets see how to block the access on country basis to the websites hosted in our server.<\/p>\n

For blocking two countries say CN and PK, open .htaccess file of the website and paste the codes:<\/p>\n

————————–
\nSetEnvIf GEOIP_COUNTRY_CODE CN BlockCountry
\nSetEnvIf GEOIP_COUNTRY_CODE PK BlockCountry
\nDeny from env=BlockCountry
\n————————–<\/p>\n

7.For allowing a country, say India, paste the below code in htaccess :
\n—————————
\nSetEnvIf GEOIP_COUNTRY_CODE IN is_allowed
\nDeny from all
\nAllow from env=is_allowed
\n—————————<\/p>\n

Thats all \ud83d\ude42<\/p>\n

If you require help, contact SupportPRO Server Admin<\/a><\/p>\n

\"Server<\/a><\/span>