Before firewalld I used to use ipsets to blacklist several countries. Firewalld added support for ipsets with version 0.4, a year ago. Centos 7.2 is still at 0.3.9. Anyone know of a newer Centos package? jon -- Jon H. LaBadie jon at jgcomp.com 11226 South Shore Rd. (703) 787-0688 (H) Reston, VA 20190 (703) 935-6720 (C)