geoip-shell with other firewall rules in place

[sixhills]

I've reently discovered this software and installed it in a VM to play with it. It looks brilliant!

I want to use it on a family email server that's being hammered by spammers. Up to now, I've blocked specific IP ranges using features in the postfix MTA but it's becoming tedious and I'd prefer to block entire countries which are never going to send me legitimate mail.

I do have one question / request for reassurance: the email package I use (iRedMail) implements its own firewall rules using nftables. Am I correct in thinking that geoip-shell won't affect existing firewall rules, i.e. it will simply add additional rules and not replace existing rules?

Thanks again for making this available.

[friendly-bits]

Hi, NOTES.md describes in detail the firewall rules structure created by geoip-shell. To answer your question specifically, geoip-shell does not remove or change other nftables rules you have in place.

[sixhills]

Thanks, that's perfect.