With the GeoIP filter, there could be issues with services like Let's Encrypt, which require inbound connections from remote servers to update. These servers cannot be identified by precise IP addresses and therefore cannot be whitelisted. It would be interesting to be able to choose which ports to limit the GeoIP service on, or to specify ports that are excluded from the service.
With the GeoIP filter, there could be issues with services like Let's Encrypt, which require inbound connections from remote servers to update. These servers cannot be identified by precise IP addresses and therefore cannot be whitelisted. It would be interesting to be able to choose which ports to limit the GeoIP service on, or to specify ports that are excluded from the service.