Firewall Geolocation blocks

[MarcS1975]

As I understand the docker container comes with a firewall included. Has anyone designed a way to block all traffic from certain countries (Geolocation IP blocking)?

[casperklein]

You can use whatever solution you want, that supports nftables. I did something in the past manually with some scripts and https://github.com/dannysheehan/iptables-ipset-blacklists

But my conclusion was, it's not worth it. Also keep in mind, that this can potentially create false/positives, which can be hard to debug. For example, you might register for a service and wondering, why you don't receive a confirmation mail. That service might use a mail server located in a country/region you have blocked.
IP ranges can change from time to time. Any geoip database is only as good, as their datasets with the correct IPs. An outdated list can be harmful.
The same goes for services like AWS and co. You might get spam from there, but also mails from legit services. Therefore blocking AWS IPs is problematic.