white list geo block

[iamzvv]

Implement geo-blocking using a default deny model: only explicitly allowed regions are permitted, all others must be blocked.

[SamNet-dev]

Added in the latest update!

Geo-blocking now supports two modes:

Blacklist (default) — block listed countries, allow everything else
Whitelist — allow only listed countries, block everything else

TUI

Go to Security & Routing > Geo-Blocking:

  Mode:      blacklist
  Countries: none

  [1] Add country
  [2] Remove country
  [3] Clear all
  [4] Toggle mode (blacklist/whitelist)
  [0] Back

CLI

# Switch to whitelist mode (requires update first)
mtproxymax update

# Then add allowed countries
mtproxymax geoblock add ir
mtproxymax geoblock add ru

Toggle the mode via TUI option [4]. In whitelist mode, only traffic from the listed countries reaches your proxy — all other connections are dropped at the firewall level.