Geo IP blocking with Caddy 2

Help
3

In addition to @jameszen2020’s answer, with Caddy v2’s much more powerful matching capabilities, you may not need any dedicated functionality like ipfilter. Just use the remote_ip matcher and then handle those requests however you like.

example.com {
  # Match requests that come from 192.168.0.1
  @hateThisGuy {
    remote_ip 192.168.0.1
  }

  # We really hate this guy in particular
  route @hateThisGuy {
    respond "I hate you, guy!" 401
  }

  # We don't hate anyone else, though
  root /var/www/html
  file_server
}

Request matchers (Caddyfile) — Caddy Documentation
respond (Caddyfile directive) — Caddy Documentation

Unfortunately, note that this doesn’t handle IPs from downloadable databases like the v1 ipfilter did.

3 Likes