Country IP Lists

Merged ipdeny country aggregates + Starlink geofeed, formatted for pfSense URL Table aliases. Plain text, one CIDR per line. IPv4 by default.

Usage

URL	Returns
`https://geo-ip.yontec.xyz/au`	Australia, IPv4 only (default)
`https://geo-ip.yontec.xyz/au?v=6`	Australia, IPv6 only
`https://geo-ip.yontec.xyz/au?v=all`	Australia, IPv4 + IPv6 in one list
`https://geo-ip.yontec.xyz/nz`	New Zealand
`https://geo-ip.yontec.xyz/au,nz`	Multiple countries merged into one list

Any ISO 3166 two-letter country code that ipdeny publishes will work (us, gb, de, jp, …).

Go to Firewall → Aliases → URLs → Add
Type: URL Table (IPs)
URL: https://geo-ip.yontec.xyz/au (or your countries of choice)
Update frequency: 1 day
Reference the alias in your firewall rules (e.g. as the source on a WAN pass rule)

If you run dual-stack, create a second alias pointing at ?v=6 and use it in your IPv6 rules.

Lists are deduplicated and cached at the edge for 6 hours.
The Starlink geofeed is merged in because its per-cell allocations often aren't reflected in registry-based country data yet.
The x-entry-count response header reports how many networks were returned; x-failed-sources reports any upstream fetch failures.
Geo-IP data is approximate — treat country filtering as a noise reducer, not a security boundary.