GEO BLOCKING THE RIGHT WAY!!!

Поделиться
HTML-код
  • Опубликовано: 28 дек 2020
  • GEO BLOCKING THE RIGHT WAY!!!
    IF YOU WANT TO BLOCK ACCESS FROM SPECIFIC COUNTRIES, THEN DONT JUST CREATE A DENY FIREWALL POLICY WITH GEOGRAPHY ADDRESS OBJECT. IT IS NOT ENOUGH !!!
    My Books
    ---------------------------------
    Fortigate Firewall admin pocket Guide e-book
    amzn.to/3ns3Y3e
    Fortigate Firewall Security Pocket Guide
    amzn.to/3ak0rzu
    Fortigate Firewall Diagnostics Pocket Guide
    amzn.to/3pO9yOl
    Like My RUclips Channel? I have a 10$ Fortigate Courses on Udemy!
    -------------------------
    Fortigate admin crash course ( udemy best seller )
    www.udemy.com/fortigate-admin...
    Fortigate UTM crash course
    www.udemy.com/course/fortigat...
    Join this channel to get access to perks:
    / @fortitip
    MY 7 BEST CYBER /INFOSEC BOOKS
    ------------------------------------------------------------
    1. Windows internals part 1
    amzn.to/2ZSdKT9
    2. Memory forensics
    amzn.to/3mwDJcy
    3. malware analysis
    amzn.to/33JSkc7
    4. the art of invisibility
    amzn.to/2RD0RIi
    5. cryptography and network security
    amzn.to/2FQJp0a
    6. attacking network protocols
    amzn.to/3kttBiY
    7. Machine learning and security
    amzn.to/35UgGT9
    SERVICES I USE ON MY BUSINESS
    -----------------------------------------------------------------------------------------------------------------
    MY FortiGate FIREWALL
    amzn.to/33AjEcV
    MY SWITCH
    Great, 24 port managed switch from TPlink, surprisingly good. tons of features and cheap
    amzn.to/3cJZ9yF
    USB CONSOLE CABLE
    amzn.to/3mrmCZA
    GREAT WIFI EXTENDER
    amzn.to/3kwpnHo
    MY MACBOOK
    amzn.to/3kkp2r6
    MY HOME ROUTER
    amzn.to/2FGi54U
    GREAT CAT6 CABLES OFFER
    amzn.to/35DF2jN
    Bluehost.com ( great service )
    www.bluehost.com/track/fortitip/
    **Disclaimer: forti tip is a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for sites to earn advertising fees by advertising and linking to www.amazon.com.
  • НаукаНаука

Комментарии • 22

  • @networkn
    @networkn Год назад

    Would you mind explaining why geography address objects are 'not enough', please? We usually set source to our country for rules inbound? How does a local in policy differ?
    Thanks for the video.

  • @aba-nascu
    @aba-nascu 3 года назад +1

    Nice thx...

  • @logicalindian1063
    @logicalindian1063 3 года назад +1

    The last point, what you told is not clear, can you make a video on that. Eg: Typically we published lot of services outside using VIP. Do we need to add policy in Local aswell..

    • @HRCFan
      @HRCFan 2 года назад

      set match-vip enable

  • @adrianren3944
    @adrianren3944 Год назад

    Hello! I was wondering if you know how to do this but with SD-Wan enable because once enable I cant select the interface of my wan ports only the SD Wan interface...

    • @johnb1906
      @johnb1906 Год назад +1

      With SD-WAN enabled , when creating the local-in-policy in the CLI, you can still type the actual interface eg:- "wan1" or "wan2" or "port2"

  • @RK-ly5qj
    @RK-ly5qj 3 года назад +1

    I thought that simply blocking geography is enough when im doing it in "policy and objects".... Lets say that I prefer to block whole continent (wan) to may LANs... Do i really need to add sth with "local in policy" also ?^^

    • @FortiTip
      @FortiTip  3 года назад +2

      Definitely yes.

    • @RK-ly5qj
      @RK-ly5qj 3 года назад

      @@FortiTip i have to admit that its strange xD

    • @FortiTip
      @FortiTip  3 года назад +3

      @@RK-ly5qj your ipv4 policy does not effect the local in policy which is created automatically even if you block country inbound traffic

  • @dsosa23
    @dsosa23 3 года назад +1

    I don't see where you set the action to "Drop" in your Local-In-policy. Is it set to "Drop" by default?

    • @FortiTip
      @FortiTip  3 года назад

      Sure It should be set to deny , did I miss it ?

    • @dsosa23
      @dsosa23 3 года назад

      @@FortiTip Yes, I thin so, and as a follow-up question, do we need to enable it as well?

    • @ddartman7
      @ddartman7 3 года назад

      @@FortiTip I added "set action deny" to the config but when I come back into and send the "show" command, all other settings are listed but not the deny command. What am I missing?

    • @ddartman7
      @ddartman7 3 года назад

      @@FortiTip And shouldn't the policy be visible within the GUI? It's not. We're missing something?

    • @FortiTip
      @FortiTip  3 года назад

      @@ddartman7 did you set the status to enable in the policy " set status enable "

  • @SoujiOkitaTwo
    @SoujiOkitaTwo Год назад +1

    Verse 1:
    We're marching in the streets, our voices loud and clear
    Against a system that's unjust, one that we all fear
    Geoblocking's got us down, we can't access what we need
    We're tired of all the barriers, it's time to be freed
    Chorus:
    No more geoblocking, it's time to unite
    The internet's for everyone, it's a basic human right
    We won't be silenced, we won't be ignored
    Our protest will be heard, our message will be roared
    Verse 2:
    We want to watch our shows, listen to music too
    But geoblocking's in our way, it's all we can do
    We pay for what we want, but we can't use it as we please
    It's time to take a stand, we won't accept this disease
    Chorus:
    No more geoblocking, it's time to unite
    The internet's for everyone, it's a basic human right
    We won't be silenced, we won't be ignored
    Our protest will be heard, our message will be roared
    Bridge:
    We're fighting for a world where borders don't exist
    Where we can use the internet as we see fit
    We won't stop until we're free, until we can connect
    Geoblocking won't defeat us, we'll keep fighting back
    Chorus:
    No more geoblocking, it's time to unite
    The internet's for everyone, it's a basic human right
    We won't be silenced, we won't be ignored
    Our protest will be heard, our message will be roared
    Outro:
    We'll keep on marching, until we're heard around the world
    Our voices won't be silenced, our protest won't be furled
    Geoblocking may seem strong, but we're stronger still
    Together we'll fight, and we'll always have the will.
    Verse 1:
    They say the world is connected, but it’s not true,
    Geo blocking’s got us feeling like we’re trapped in a zoo,
    Streaming shows and music, they tell us we can’t,
    But we won’t sit back and watch them enforce their ban.
    Chorus:
    We won’t be silenced, we won’t be ignored,
    Our voices will rise up like a mighty chord,
    Geo blocking can’t stop us, we’ll break down the walls,
    We’ll unite as one and answer the call.
    Verse 2:
    They say they’re protecting rights, but it’s just greed,
    Geo blocking’s just a tool to control what we read,
    Access denied, just because of our location,
    We demand our right to free communication.
    Chorus:
    We won’t be silenced, we won’t be ignored,
    Our voices will rise up like a mighty chord,
    Geo blocking can’t stop us, we’ll break down the walls,
    We’ll unite as one and answer the call.
    Verse 3:
    They say it’s about money, but it’s more than that,
    Geo blocking’s just another form of censorship, flat,
    We won’t let them dictate what we can or can’t see,
    We’ll stand up for our right to information and free.
    Chorus:
    We won’t be silenced, we won’t be ignored,
    Our voices will rise up like a mighty chord,
    Geo blocking can’t stop us, we’ll break down the walls,
    We’ll unite as one and answer the call.
    Verse 4:
    It’s time for change, it’s time for action,
    Geo blocking’s a violation of our satisfaction,
    We’ll keep fighting until the walls come crashing down,
    We’ll keep singing this song until freedom’s found.
    Chorus:
    We won’t be silenced, we won’t be ignored,
    Our voices will rise up like a mighty chord,
    Geo blocking can’t stop us, we’ll break down the walls,
    We’ll unite as one and answer the call.
    Verse 1:
    They say the world is open, but we know it's not true,
    Geoblocking walls, they try to hide the view,
    We're tired of the lies, we're tired of the walls,
    We won't let them stop us, we'll break down these stalls.
    Chorus:
    We are rebels, fighting for our right,
    To access what we want, with all our might,
    Geoblocking can't stop us, we won't be denied,
    Our freedom to roam, is our battle cry.
    Verse 2:
    They say we're not allowed, because of where we live,
    But we refuse to accept, the limits they give,
    We demand access, to all the content,
    We'll keep pushing forward, until the block is bent.
    Chorus:
    We are rebels, fighting for our right,
    To access what we want, with all our might,
    Geoblocking can't stop us, we won't be denied,
    Our freedom to roam, is our battle cry.
    Verse 3:
    From Netflix to RUclips, we want it all,
    We won't let geoblocking, make us hit a wall,
    We'll use VPNs, and other tricks we know,
    We'll find a way, to make the content flow.
    Chorus:
    We are rebels, fighting for our right,
    To access what we want, with all our might,
    Geoblocking can't stop us, we won't be denied,
    Our freedom to roam, is our battle cry.
    Verse 4:
    To the geoblockers, we say this,
    Our fight won't end, until we win,
    We won't give up, we won't give in,
    Our rebel song, is our way to begin.
    Chorus:
    We are rebels, fighting for our right,
    To access what we want, with all our might,
    Geoblocking can't stop us, we won't be denied,
    Our freedom to roam, is our battle cry.
    Verse 1:
    Locked out, can't access what we need
    Restricted by borders, it's hard to proceed
    No matter how much we try, we can't break through
    But it's time for a change, it's long overdue
    Chorus:
    Let's overthrow geoblocking, break down the walls
    No more barriers, we'll answer the call
    We'll unite together, no matter where we are
    Overthrow geoblocking, let freedom go far
    Verse 2:
    Streaming services, limited by region
    Piracy rises, it's not the solution
    We want to pay for what we love, no doubt
    But we're tired of being locked out
    Chorus:
    Let's overthrow geoblocking, break down the walls
    No more barriers, we'll answer the call
    We'll unite together, no matter where we are
    Overthrow geoblocking, let freedom go far
    Bridge:
    No more VPNs or proxies needed
    No more frustration, we're finally heeded
    Content for all, that's our goal
    Geoblocking's downfall, we'll roll
    Chorus:
    Let's overthrow geoblocking, break down the walls
    No more barriers, we'll answer the call
    We'll unite together, no matter where we are
    Overthrow geoblocking, let freedom go far
    Outro:
    Geoblocking's time has come to an end
    We'll stand strong, we'll never bend
    Let's celebrate this victory, let's cheer
    Overthrow geoblocking, we have no fear.

  • @sensit77
    @sensit77 2 года назад +1

    terrible