Nick Howitt wrote:

I've now put it into a proper Howto in the Knowledgebase

@John, it looks like my script has moved on a bit from when I posted. MAXELEM is now parameterised. This is a trivial change and you don't need it. I've also set it to e-mail me if the update fails.

Also writing it up has shown a stupidity in my firewall rules. You can remove:from the firewall rules. This should have been replaced by:And not supplemented with it.

Sorry to be a pain but what is the rule to block all traffic except from what's enabled within the country list?

Would the following work ?