GEOBLOCK_
// country_ip_address_lists_for_mikrotik_routeros
CCCOUNTRYV4V6
Loading dataset...
Selected:
none
Mode:
Address family:
Address-list name:
WAN interface-list:
Firewall placement:
Auto-update every:
countries
0
v4 entries ≈
0
v6 entries ≈
0
Select at least one country.
dataset: —
Source URL (.rsc):
1 · One-shot import (Terminal):
—
2 · Auto-update script + scheduler (recommended):
—
3 · Firewall rules (created DISABLED — review, then enable):
—
> https_trust // only if /tool fetch fails with a certificate error
One-time: trust Let's Encrypt root (ISRG Root X1):
The update script runs /import on the downloaded file, i.e. it executes it — that is why it uses
check-certificate=yes-without-crl and never no. Bootstrapping the root over an unverified fetch is a one-time
trust-on-first-use step: compare the fingerprint before relying on it. On RouterOS 7.19+ check
/certificate settings print — if the built-in trust store is enabled for fetch, this step is unnecessary.
> remove_everything // uninstall
Remove script, scheduler, lists and rules:
—