I would like to allow traffic from one country only.
I have seen and read online multiple ways, but most of them are outdated (with Xtables-addons), and the other half show how to blacklist IPs that one dose not like.
However this is a wrong approach, to black list everything one by one. A better approach will be to do a white list so everything beside that white list will be blocked.
I am in France; I want to allow only french clients/users to access the server.
The iptables rule I have inplace is
sudo iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to-destination xx.xx.xx.xx:80
just forwarding traffic.