Do we have an add-on that would allow me to block traffic from specific countries? With all the anti-spam features on, email registration verification, Bad Behavior, etc., I still get spammers from China.
There is not really any good way to reliably block a country.
The only way is to block ranges of IP addresses that likely belong to a certain country. But I wouldn't do that from PHP, at least from htaccess or even better with some Apache module, for example with the old
mod_geoip (https://linuxconfig.org/redirect-or-block-traffic-based-on-geographical-location-apache-geoip-mod) (now replaced by MaxMind DB (http://maxmind.github.io/mod_maxminddb/) as far as I understood).
Thanks.
If you have your own VPS then you can do it with the max-mind geoIP database ... this is updated monthly (generally).
Both Apache and Nginx have geoip modules that work with the max mind DB. So when user visits, the IP location is determined and you can block or allow it on a per country basis. Of course since IP's are dynamic you run a small chance of blocking the wrong folks until the DB is updated again.
If you do any of that be sure to have a cron job that refreshes those DB files one a month or so.
^^ what they said. Or if you have proper server control, you can install ConfigServer firewall. It allows nation blocking as a feature. CSF has several other really nice features as well. Good luck!
http://www.configserver.com/cp/csf.html
Cool .. had not seen that one before, may have to give it a whirl as it looks very complete. I've always used a combo of UFW + Fail2Ban with just a handful of open ports.
Virtualmin has CSF by default
Does anybody know a good hoster that supports this CSF together with CPanel WHM and is not too expensive..So not more than 10 to 20 USD per month for hosting ?
I am mostly interested to block users who make too much traffic in the forum and try to download the whole forum..
How can these be blocked ?
Or is there a simple Website firewall available for Elkarte that can do this ?
Is no point of blocking a country. Limiting access time should be fine though.