GEO BLOCKING THE RIGHT WAY!!!
HTML-код
- Опубликовано: 28 дек 2020
- GEO BLOCKING THE RIGHT WAY!!!
IF YOU WANT TO BLOCK ACCESS FROM SPECIFIC COUNTRIES, THEN DONT JUST CREATE A DENY FIREWALL POLICY WITH GEOGRAPHY ADDRESS OBJECT. IT IS NOT ENOUGH !!!
My Books
---------------------------------
Fortigate Firewall admin pocket Guide e-book
amzn.to/3ns3Y3e
Fortigate Firewall Security Pocket Guide
amzn.to/3ak0rzu
Fortigate Firewall Diagnostics Pocket Guide
amzn.to/3pO9yOl
Like My RUclips Channel? I have a 10$ Fortigate Courses on Udemy!
-------------------------
Fortigate admin crash course ( udemy best seller )
www.udemy.com/fortigate-admin...
Fortigate UTM crash course
www.udemy.com/course/fortigat...
Join this channel to get access to perks:
/ @fortitip
MY 7 BEST CYBER /INFOSEC BOOKS
------------------------------------------------------------
1. Windows internals part 1
amzn.to/2ZSdKT9
2. Memory forensics
amzn.to/3mwDJcy
3. malware analysis
amzn.to/33JSkc7
4. the art of invisibility
amzn.to/2RD0RIi
5. cryptography and network security
amzn.to/2FQJp0a
6. attacking network protocols
amzn.to/3kttBiY
7. Machine learning and security
amzn.to/35UgGT9
SERVICES I USE ON MY BUSINESS
-----------------------------------------------------------------------------------------------------------------
MY FortiGate FIREWALL
amzn.to/33AjEcV
MY SWITCH
Great, 24 port managed switch from TPlink, surprisingly good. tons of features and cheap
amzn.to/3cJZ9yF
USB CONSOLE CABLE
amzn.to/3mrmCZA
GREAT WIFI EXTENDER
amzn.to/3kwpnHo
MY MACBOOK
amzn.to/3kkp2r6
MY HOME ROUTER
amzn.to/2FGi54U
GREAT CAT6 CABLES OFFER
amzn.to/35DF2jN
Bluehost.com ( great service )
www.bluehost.com/track/fortitip/
**Disclaimer: forti tip is a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for sites to earn advertising fees by advertising and linking to www.amazon.com. Наука
Would you mind explaining why geography address objects are 'not enough', please? We usually set source to our country for rules inbound? How does a local in policy differ?
Thanks for the video.
Nice thx...
Thank you
The last point, what you told is not clear, can you make a video on that. Eg: Typically we published lot of services outside using VIP. Do we need to add policy in Local aswell..
set match-vip enable
Hello! I was wondering if you know how to do this but with SD-Wan enable because once enable I cant select the interface of my wan ports only the SD Wan interface...
With SD-WAN enabled , when creating the local-in-policy in the CLI, you can still type the actual interface eg:- "wan1" or "wan2" or "port2"
I thought that simply blocking geography is enough when im doing it in "policy and objects".... Lets say that I prefer to block whole continent (wan) to may LANs... Do i really need to add sth with "local in policy" also ?^^
Definitely yes.
@@FortiTip i have to admit that its strange xD
@@RK-ly5qj your ipv4 policy does not effect the local in policy which is created automatically even if you block country inbound traffic
I don't see where you set the action to "Drop" in your Local-In-policy. Is it set to "Drop" by default?
Sure It should be set to deny , did I miss it ?
@@FortiTip Yes, I thin so, and as a follow-up question, do we need to enable it as well?
@@FortiTip I added "set action deny" to the config but when I come back into and send the "show" command, all other settings are listed but not the deny command. What am I missing?
@@FortiTip And shouldn't the policy be visible within the GUI? It's not. We're missing something?
@@ddartman7 did you set the status to enable in the policy " set status enable "
Verse 1:
We're marching in the streets, our voices loud and clear
Against a system that's unjust, one that we all fear
Geoblocking's got us down, we can't access what we need
We're tired of all the barriers, it's time to be freed
Chorus:
No more geoblocking, it's time to unite
The internet's for everyone, it's a basic human right
We won't be silenced, we won't be ignored
Our protest will be heard, our message will be roared
Verse 2:
We want to watch our shows, listen to music too
But geoblocking's in our way, it's all we can do
We pay for what we want, but we can't use it as we please
It's time to take a stand, we won't accept this disease
Chorus:
No more geoblocking, it's time to unite
The internet's for everyone, it's a basic human right
We won't be silenced, we won't be ignored
Our protest will be heard, our message will be roared
Bridge:
We're fighting for a world where borders don't exist
Where we can use the internet as we see fit
We won't stop until we're free, until we can connect
Geoblocking won't defeat us, we'll keep fighting back
Chorus:
No more geoblocking, it's time to unite
The internet's for everyone, it's a basic human right
We won't be silenced, we won't be ignored
Our protest will be heard, our message will be roared
Outro:
We'll keep on marching, until we're heard around the world
Our voices won't be silenced, our protest won't be furled
Geoblocking may seem strong, but we're stronger still
Together we'll fight, and we'll always have the will.
Verse 1:
They say the world is connected, but it’s not true,
Geo blocking’s got us feeling like we’re trapped in a zoo,
Streaming shows and music, they tell us we can’t,
But we won’t sit back and watch them enforce their ban.
Chorus:
We won’t be silenced, we won’t be ignored,
Our voices will rise up like a mighty chord,
Geo blocking can’t stop us, we’ll break down the walls,
We’ll unite as one and answer the call.
Verse 2:
They say they’re protecting rights, but it’s just greed,
Geo blocking’s just a tool to control what we read,
Access denied, just because of our location,
We demand our right to free communication.
Chorus:
We won’t be silenced, we won’t be ignored,
Our voices will rise up like a mighty chord,
Geo blocking can’t stop us, we’ll break down the walls,
We’ll unite as one and answer the call.
Verse 3:
They say it’s about money, but it’s more than that,
Geo blocking’s just another form of censorship, flat,
We won’t let them dictate what we can or can’t see,
We’ll stand up for our right to information and free.
Chorus:
We won’t be silenced, we won’t be ignored,
Our voices will rise up like a mighty chord,
Geo blocking can’t stop us, we’ll break down the walls,
We’ll unite as one and answer the call.
Verse 4:
It’s time for change, it’s time for action,
Geo blocking’s a violation of our satisfaction,
We’ll keep fighting until the walls come crashing down,
We’ll keep singing this song until freedom’s found.
Chorus:
We won’t be silenced, we won’t be ignored,
Our voices will rise up like a mighty chord,
Geo blocking can’t stop us, we’ll break down the walls,
We’ll unite as one and answer the call.
Verse 1:
They say the world is open, but we know it's not true,
Geoblocking walls, they try to hide the view,
We're tired of the lies, we're tired of the walls,
We won't let them stop us, we'll break down these stalls.
Chorus:
We are rebels, fighting for our right,
To access what we want, with all our might,
Geoblocking can't stop us, we won't be denied,
Our freedom to roam, is our battle cry.
Verse 2:
They say we're not allowed, because of where we live,
But we refuse to accept, the limits they give,
We demand access, to all the content,
We'll keep pushing forward, until the block is bent.
Chorus:
We are rebels, fighting for our right,
To access what we want, with all our might,
Geoblocking can't stop us, we won't be denied,
Our freedom to roam, is our battle cry.
Verse 3:
From Netflix to RUclips, we want it all,
We won't let geoblocking, make us hit a wall,
We'll use VPNs, and other tricks we know,
We'll find a way, to make the content flow.
Chorus:
We are rebels, fighting for our right,
To access what we want, with all our might,
Geoblocking can't stop us, we won't be denied,
Our freedom to roam, is our battle cry.
Verse 4:
To the geoblockers, we say this,
Our fight won't end, until we win,
We won't give up, we won't give in,
Our rebel song, is our way to begin.
Chorus:
We are rebels, fighting for our right,
To access what we want, with all our might,
Geoblocking can't stop us, we won't be denied,
Our freedom to roam, is our battle cry.
Verse 1:
Locked out, can't access what we need
Restricted by borders, it's hard to proceed
No matter how much we try, we can't break through
But it's time for a change, it's long overdue
Chorus:
Let's overthrow geoblocking, break down the walls
No more barriers, we'll answer the call
We'll unite together, no matter where we are
Overthrow geoblocking, let freedom go far
Verse 2:
Streaming services, limited by region
Piracy rises, it's not the solution
We want to pay for what we love, no doubt
But we're tired of being locked out
Chorus:
Let's overthrow geoblocking, break down the walls
No more barriers, we'll answer the call
We'll unite together, no matter where we are
Overthrow geoblocking, let freedom go far
Bridge:
No more VPNs or proxies needed
No more frustration, we're finally heeded
Content for all, that's our goal
Geoblocking's downfall, we'll roll
Chorus:
Let's overthrow geoblocking, break down the walls
No more barriers, we'll answer the call
We'll unite together, no matter where we are
Overthrow geoblocking, let freedom go far
Outro:
Geoblocking's time has come to an end
We'll stand strong, we'll never bend
Let's celebrate this victory, let's cheer
Overthrow geoblocking, we have no fear.
terrible
Why?