Here is how you can compile and install xtables-addons on CentOS 7.
first, Install Dependencies:
# yum install gcc gcc-c++ make automake unzip zip xz kernel-devel-`uname -r` wget unzip iptables-devel perl-Text-CSV_XS
download xtables-addons
# wget http://ufpr.dl.sourceforge.net/project/xtables-addons/Xtables-addons/xtables-addons-2.10.tar.xz
extract, compile and install
# tar -xJf xtables-addons-2.10.tar.xz # cd xtables-addons-2.10 # configure # make && make install
done!
and now for example we want to use geoip module, first of all install geoip database for xtables-addons.
still from xtables-addons-2.10 directory.
# cd geoip
# ./xt_geoip_dl
# ./xt_geoip_build GeoIPCountryWhois.csv
# mkdir -p /usr/share/xt_geoip
# cp -r {BE,LE} /usr/share/xt_geoip
# modprobe xt_geoip
if you want only allow ssh connection from certain country(ie. ID) and drop the rest here’s how to do it.
# iptables -I INPUT -p tcp --dport 22 -m geoip ! --src-cc ID -j DROP