I found an old thread related to this, but the old script doesn’t seem to work. I found a new source that has an .htacces deny list for each country that they update. Found here: http://www.countryipblocks.net/country-blocks/htaccess-deny-format/
If someone would enlighten me as to how to setup a script that would auto update on some interval that I could add to all of Mikrotik devices, I would most happy!
I am using a Power Router 732, and I have several RB493’s in use.
Thanks,
Dan
You’re not going to be able to pull that in via a script that runs on the routers simply because scripts cannot deal with files larger than 4,096 bytes - many countries have enough IP networks assigned to them to go over that limit. Assuming on average 2 bytes per octet, the CIDR ‘/’ and a two digit mask plus a carriage return per entry together with the 10 characters for 'deny from ’ you get to 24 bytes per entry, which limits you to 170 lines per file.
You can push configuration from the outside by computer controlled SSH sessions or the API, but at that point the solution is no longer dependent on RouterOS itself. You can use whatever scripting language you like to mangle the country files into RouterOS rules, and whatever means of access you would like. API bindings exist for most languages and are shown on the wiki, many scripting languages also have existing Telnet or SSH interfaces.
Thank you very much for your input! I’ll do some research on the items you mentioned and see what I can come up with.