iptables geoip xtables firewall by country

geoip.sh

# This is an example of how to use xtables / xt_geoip to block requests
# based on their source/destination country. 
#
# It can be computationally expensive to have tons of iptables rules. 
# According to the bottom of the following page, this xt_geoip is probably 
# about as efficient as can be for doing this kind of thing:
# http://xtables-addons.sourceforge.net/geoip.php

# Install packages
apt-get install xtables-addons-common libtext-csv-xs-perl unzip

# Create the directory where the country data should live
mkdir /usr/share/xt_geoip

# Download and install the latest country data
mkdir /tmp/xt_geoip_dl
cd /tmp/xt_geoip_dl
/usr/lib/xtables-addons/xt_geoip_dl
/usr/lib/xtables-addons/xt_geoip_build -D /usr/share/xt_geoip *.csv

# Prohibition of connection from China
#iptables -A OUTPUT -m geoip --destination-country CN  -j REJECT