Opensource GEOIP service for mikrotik

I’m considering also publishing a GEOIP-based address-list generator for MikroTik routers, and I’d like to gauge community interest before going further.

The idea is to provide our actual internal service that:

  • Is based on public GEOIP data (currently testing with deny-ip.com, but open to better or more reliable sources)

  • Allows selecting regions or individual countries

  • Generates MikroTik-ready .rsc scripts

  • Supports custom address-list names (per use case or environment)

  • Uses the same import logic as the WIFX blocklist project (scheduler + fetch, RAM-only, no NAND wear)

Possible next steps (depending on interest):

  • Open-source the project (GitHub)

  • Provide a public hosted service

  • Package it as a Docker container

  • Allow custom configurations (multiple lists, environments, automation)

it’s also made in python with chatgpt like our blocklist service:

If there is real interest from the community, I’d be happy to clean it up, document it properly, and make it available.

Questions:

  • Would you use such a GEOIP service for MikroTik?

  • Open-source, hosted service, or both?

  • Any preferred GEOIP data source?

  • Features you would consider essential?

Feedback, suggestions, and constructive criticism are very welcome.

Thanks!

2 Likes

It's variation of your other discussed project. It's hard to say if it is a intrest in it or not? Just do it.
It's worth to have such a tool but there are no promises that it would be used. It's a "beauty" ofsoftwritten just for fun. However, if you want to monetize it starting from making links to&from popular forum or free ads, that is another story to disscuss.

I haven't tried it... but from demo site on your "main" blacklist project, it does seem like it should be part of your other project as additional possible blacklists.

Also, you could use JS map like Leaflet/etc to preview what countries are block, or selecting them, to add some fun to the HTML.

And, perhaps aligning your code for use as /container on MikroTik so the update process can live on the router might increase your potential userbase, but IDK. In newest RouterOS, you can execute commands against a container. Or could just have it start and generate a file with the compiled list based on ENV variables.

thanks for the information!

I think this is a very useful feature(for me).

I’m currently using Vyos+geoip on my VPS to configs ports(SSH, Wireguard, OpenVPN, BGP, etc.), reducing the possibility of attacks.

last year, I considered replacing Vyos with ROS, but ultimately abandoned the idea of changing the OS because ROS does not have geoip.

If ROS adds geoip in the future I will reconsider replacing Vyos with ROS.

Yes, I would use this feature.

To answer your questions:

  • Yes
  • Both
  • Any would do
  • Blocking/Accepting via a country

Thanks!

Thanks,

I'll be releasing an open-source test version shortly...
denyip.com seems like a good compromise, right?

You mean www.ipdeny.com ?