{"id":2802,"date":"2026-02-02T18:23:24","date_gmt":"2026-02-02T21:23:24","guid":{"rendered":"https:\/\/helpsysadmin.com.br\/blog\/?p=2802"},"modified":"2026-04-01T06:46:53","modified_gmt":"2026-04-01T09:46:53","slug":"bloquear-acesso-por-pais-csf","status":"publish","type":"post","link":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/","title":{"rendered":"Como bloquear acesso de pa\u00eds com ConfigServer Firewall (CSF)"},"content":{"rendered":"<div id=\"helps-3041948567\" class=\"helps-before-content-2 helps-entity-placement\"><script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-3661896953164277\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- 2anuncios display quadrado -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-3661896953164277\"\r\n     data-ad-slot=\"5051229894\"\r\n     data-ad-format=\"auto\"\r\n     data-full-width-responsive=\"true\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script><\/div>\n<p class=\"wp-block-paragraph\">Bloquear pa\u00eds csf. Bloquear acessos por pa\u00eds \u00e9 uma pr\u00e1tica comum para <strong>reduzir ataques automatizados, for\u00e7a bruta e tr\u00e1fego malicioso<\/strong>. O <strong>ConfigServer Security &amp; Firewall (CSF)<\/strong> permite esse controle de forma simples e eficiente, usando geolocaliza\u00e7\u00e3o por IP.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Neste guia pr\u00e1tico, voc\u00ea vai aprender <strong>como bloquear pa\u00edses inteiros no CSF<\/strong>, boas pr\u00e1ticas e impactos reais em seguran\u00e7a e performance.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-quando-vale-a-pena-bloquear-paises\">\ud83e\udde0 Quando vale a pena bloquear pa\u00edses?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Bloqueio por pa\u00eds \u00e9 recomendado quando:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Seu site atende apenas um ou poucos pa\u00edses<\/li>\n\n\n\n<li>H\u00e1 muitos ataques vindos de regi\u00f5es espec\u00edficas<\/li>\n\n\n\n<li>Voc\u00ea quer reduzir ru\u00eddo em logs e consumo de recursos<\/li>\n\n\n\n<li>O servidor hospeda <strong>WordPress, pain\u00e9is administrativos ou APIs privadas<\/strong><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u26a0\ufe0f <strong>Aten\u00e7\u00e3o:<\/strong> n\u00e3o \u00e9 indicado para sites globais ou e-commerces internacionais.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-requisitos\">\u2705 Requisitos<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Antes de come\u00e7ar, confirme:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>CSF instalado e ativo<\/li>\n\n\n\n<li>Servidor com acesso root<\/li>\n\n\n\n<li>Sistema compat\u00edvel (AlmaLinux, CloudLinux, CentOS, Rocky, Ubuntu)<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Para verificar o CSF:<\/p>\n\n\n\n<div class=\"wp-block-codemirror-blocks-code-block code-block\"><pre>csf -v\n#edite o arquivo de configura\u00e7\u00e3o do CSF\nnano \/etc\/csf\/csf.conf<\/pre><\/div>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-configure-a-opcao-cc-src\">\ud83d\udd0eConfigure a op\u00e7\u00e3o <strong>CC_SRC<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Altere a op\u00e7\u00e3o para &#8220;2&#8221;. (&#8220;2&#8221; &#8211; db-ip, ipdeny, iptoasn)<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-configure-a-opcao-cc-lookup\">\ud83d\udd0eConfigure a op\u00e7\u00e3o CC_LOOKUP<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Antes de bloquear, o CSF precisa saber como identificar a origem dos IPs.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Procure por <code>CC_LOOKUP<\/code> no arquivo de configura\u00e7\u00e3o.<\/li>\n\n\n\n<li>Certifique-se de que o valor est\u00e1 definido como <strong>1<\/strong> (padr\u00e3o).<\/li>\n<\/ul>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\"><strong>Dica:<\/strong> O valor <strong>1<\/strong> usa o banco de dados interno do CSF, que costuma ser suficiente para a maioria dos casos.<\/p>\n<\/blockquote>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-adicione-os-codigos-dos-paises\">\ud83d\udd0eAdicione os c\u00f3digos dos pa\u00edses<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Existem duas vari\u00e1veis principais para controle geogr\u00e1fico:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>CC_DENY:<\/strong> Bloqueia completamente o acesso desses pa\u00edses ao seu servidor.<\/li>\n\n\n\n<li><strong>CC_ALLOW_FILTER:<\/strong> Permite o acesso apenas dos pa\u00edses listados (\u00fatil para servidores muito restritos).<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Para bloquear, localize <code>CC_DENY<\/code> e insira os c\u00f3digos ISO (dois caracteres) separados por v\u00edrgula. <strong>Exemplo para bloquear China e R\u00fassia:<\/strong> <code>CC_DENY = \"CN,RU\"<\/code>. Veja a lista de pa\u00edses com dois d\u00edgitos <a href=\"https:\/\/www.iban.com\/country-codes\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>clicando aqui https:\/\/www.iban.com\/country-codes<\/strong><\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-reinicie-o-firewall\">\ud83d\udd0eReinicie o Firewall<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Para as altera\u00e7\u00f5es entrarem em vigor, voc\u00ea precisa reiniciar o servi\u00e7o:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Via Terminal:<\/strong> <code>csf -r<\/code><\/li>\n\n\n\n<li><strong>Via Interface:<\/strong> Clique no bot\u00e3o <strong>&#8220;Restart csf+lfd&#8221;<\/strong> ao final da p\u00e1gina de configura\u00e7\u00e3o.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">\u26a0\ufe0f Avisos Importantes<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Consumo de Recursos:<\/strong> N\u00e3o tente bloquear o mundo inteiro. Cada pa\u00eds adicionado aumenta o n\u00famero de regras no <code>iptables<\/code>. Isso pode deixar o servidor lento se voc\u00ea n\u00e3o tiver mem\u00f3ria RAM sobrando.<\/li>\n\n\n\n<li><strong>Falsos Positivos:<\/strong> Lembre-se que servi\u00e7os de CDN (como Cloudflare) ou rastreadores de busca (como Googlebot) podem ser afetados se voc\u00ea n\u00e3o <a href=\"https:\/\/helpsysadmin.com.br\/blog\/configurar-login-automatico-phpmyadmin\/\" data-internallinksmanager029f6b8e52c=\"3\" title=\"Como Configurar Login Autom\u00e1tico no phpMyAdmin via DirectAdmin\">configurar<\/a> as listas de permiss\u00e3o corretamente.<\/li>\n\n\n\n<li><strong>C\u00f3digos ISO:<\/strong> Sempre use letras mai\u00fasculas (ex: <code>US, BR, FR<\/code>).<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-bloquear-paises-especificos\">\ud83d\udeab Bloquear pa\u00edses espec\u00edficos<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-exemplo-bloquear-china-russia-e-ucrania\">Exemplo: bloquear China, R\u00fassia e Ucr\u00e2nia<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Use os <strong>c\u00f3digos ISO de pa\u00eds<\/strong>:<\/p>\n\n\n\n<div class=\"wp-block-codemirror-blocks-code-block code-block\"><pre>CC_DENY = &quot;CN,RU,UA&quot;\n<\/pre><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Salve o arquivo.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-permitir-apenas-paises-especificos-modo-restritivo\">\ud83c\udf10 Permitir apenas pa\u00edses espec\u00edficos (modo restritivo)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Se quiser <strong>permitir somente um pa\u00eds<\/strong> (ex: Brasil):<\/p>\n\n\n\n<div class=\"wp-block-codemirror-blocks-code-block code-block\"><pre>CC_ALLOW = &quot;BR&quot;\n<\/pre><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">\u26a0\ufe0f Quando <code>CC_ALLOW<\/code> \u00e9 usado, <strong>todo o resto \u00e9 bloqueado automaticamente<\/strong>.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-aplicar-as-regras\">\ud83d\udd04 Aplicar as regras<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Ap\u00f3s qualquer altera\u00e7\u00e3o:<\/p>\n\n\n\n<div class=\"wp-block-codemirror-blocks-code-block code-block\"><pre>csf -r\n<\/pre><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Para verificar se est\u00e1 ativo:<\/p>\n\n\n\n<div class=\"wp-block-codemirror-blocks-code-block code-block\"><pre>csf -l\n<\/pre><\/div>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-testando-o-bloqueio\">\ud83e\uddea Testando o bloqueio<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Voc\u00ea pode testar usando IPs p\u00fablicos de outros pa\u00edses ou ferramentas como:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>VPN<\/li>\n\n\n\n<li><code>curl<\/code> via proxy<\/li>\n\n\n\n<li>Logs do CSF:<\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-codemirror-blocks-code-block code-block\"><pre>grep &quot;CC_DENY&quot; \/var\/log\/lfd.log\n<\/pre><\/div>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-bloqueio-por-pais-afeta-performance\">\u2699\ufe0f Bloqueio por pa\u00eds afeta performance?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u2714\ufe0f <strong>Impacto m\u00ednimo<\/strong>, pois:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>A verifica\u00e7\u00e3o ocorre antes da aplica\u00e7\u00e3o web<\/li>\n\n\n\n<li>Reduz conex\u00f5es in\u00fateis<\/li>\n\n\n\n<li>Diminui carga em PHP, Apache e Nginx<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\ud83d\udca1 Em ambientes WordPress, o ganho costuma ser <strong>indireto<\/strong>, reduzindo ataques a <code>\/wp-login.php<\/code> e <code>\/xmlrpc.php<\/code>.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-boas-praticas-recomendadas\">\ud83d\udd10 Boas pr\u00e1ticas recomendadas<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Combine com <strong><a href=\"https:\/\/helpsysadmin.com.br\/blog\/como-instalar-crowdsec\/\" data-internallinksmanager029f6b8e52c=\"2\" title=\"CrowdSec\" target=\"_blank\" rel=\"noopener\">CrowdSec<\/a><\/strong>. Veja <strong><a href=\"https:\/\/helpsysadmin.com.br\/blog\/como-instalar-crowdsec\/\" target=\"_blank\" rel=\"noreferrer noopener\">Como instalar Crowdsec<\/a><\/strong><\/li>\n\n\n\n<li>Use <code>CC_ALLOW<\/code> apenas se tiver certeza<\/li>\n\n\n\n<li>Monitore falsos positivos<\/li>\n\n\n\n<li>N\u00e3o bloqueie pa\u00edses onde servi\u00e7os externos est\u00e3o hospedados (CDNs, APIs)<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-erros-comuns\">\u274c Erros comuns<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u274c Bloquear pa\u00edses usados por:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Cloudflare<\/li>\n\n\n\n<li>Googlebot<\/li>\n\n\n\n<li>APIs de pagamento<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u274c Esquecer de reiniciar o CSF ap\u00f3s altera\u00e7\u00f5es<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-alternativas-ao-bloqueio-por-pais\">\ud83d\udccc Alternativas ao bloqueio por pa\u00eds<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Se quiser algo mais inteligente:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong><a href=\"https:\/\/helpsysadmin.com.br\/blog\/como-instalar-crowdsec\/\" data-internallinksmanager029f6b8e52c=\"2\" title=\"CrowdSec\" target=\"_blank\" rel=\"noopener\">CrowdSec<\/a><\/strong> (bloqueio comportamental)<\/li>\n\n\n\n<li><strong>Cloudflare WAF<\/strong><\/li>\n\n\n\n<li>Rate limit no Nginx<\/li>\n\n\n\n<li>Firewall de aplica\u00e7\u00e3o (ModSecurity)<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-conclusao\">\ud83d\udcc8 Conclus\u00e3o<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">O <strong>ConfigServer Firewall<\/strong> oferece um m\u00e9todo simples e eficaz para <strong>bloquear pa\u00edses inteiros<\/strong>, reduzindo ataques e tr\u00e1fego indesejado. Quando bem aplicado, melhora a <strong>seguran\u00e7a do servidor sem impacto negativo no desempenho<\/strong>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-faq-bloquear-acesso-por-pais-no-csf\">FAQ \u2014 Bloquear acesso por pa\u00eds no CSF<\/h2>\n\n\n\n<div class=\"schema-faq wp-block-yoast-faq-block\"><div class=\"schema-faq-section\" id=\"faq-question-1770067820731\"><strong class=\"schema-faq-question\">O que \u00e9 bloqueio por pa\u00eds no CSF?<\/strong> <p class=\"schema-faq-answer\">O bloqueio por pa\u00eds no CSF (ConfigServer Firewall) usa geolocaliza\u00e7\u00e3o de IP para impedir conex\u00f5es originadas de pa\u00edses espec\u00edficos, ajudando a reduzir ataques automatizados e tr\u00e1fego malicioso no servidor.<\/p> <\/div> <div class=\"schema-faq-section\" id=\"faq-question-1770067854489\"><strong class=\"schema-faq-question\">Bloquear pa\u00edses no CSF melhora a seguran\u00e7a?<\/strong> <p class=\"schema-faq-answer\">Sim. O bloqueio por pa\u00eds reduz significativamente tentativas de for\u00e7a bruta, scans de portas e ataques a servi\u00e7os como SSH, WordPress e pain\u00e9is administrativos.<\/p> <\/div> <div class=\"schema-faq-section\" id=\"faq-question-1770067879766\"><strong class=\"schema-faq-question\">O bloqueio por pa\u00eds afeta o desempenho do servidor?<\/strong> <p class=\"schema-faq-answer\">N\u00e3o de forma negativa. Pelo contr\u00e1rio: o CSF bloqueia conex\u00f5es ainda no n\u00edvel do firewall, diminuindo o consumo de CPU, mem\u00f3ria e processos do servidor web e PHP.<\/p> <\/div> <div class=\"schema-faq-section\" id=\"faq-question-1770067917958\"><strong class=\"schema-faq-question\">Qual a diferen\u00e7a entre CC_DENY e CC_ALLOW no CSF?<\/strong> <p class=\"schema-faq-answer\"><strong>CC_DENY<\/strong> bloqueia pa\u00edses espec\u00edficos e permite o resto.<br\/><strong>CC_ALLOW<\/strong> permite apenas os pa\u00edses definidos e bloqueia todos os outros automaticamente.<\/p> <\/div> <div class=\"schema-faq-section\" id=\"faq-question-1770067929912\"><strong class=\"schema-faq-question\">Posso permitir apenas o Brasil no CSF?<\/strong> <p class=\"schema-faq-answer\">Sim. Basta configurar:<br\/><code>CC_ALLOW = \"BR\"<\/code><br\/>Isso far\u00e1 com que apenas IPs do Brasil tenham acesso ao servidor.<\/p> <\/div> <div class=\"schema-faq-section\" id=\"faq-question-1770067978096\"><strong class=\"schema-faq-question\">\u00c9 seguro bloquear pa\u00edses inteiros?<\/strong> <p class=\"schema-faq-answer\">Depende do tipo de site. Para sites locais, pain\u00e9is administrativos ou APIs privadas, \u00e9 seguro e recomendado. Para sites globais ou e-commerces internacionais, pode causar bloqueios indevidos.<\/p> <\/div> <div class=\"schema-faq-section\" id=\"faq-question-1770067990257\"><strong class=\"schema-faq-question\">Bloquear pa\u00edses pode afetar Googlebot ou SEO?<\/strong> <p class=\"schema-faq-answer\">N\u00e3o, desde que voc\u00ea <strong>n\u00e3o bloqueie pa\u00edses usados pelo Googlebot<\/strong>. O Google usa IPs de v\u00e1rios pa\u00edses, principalmente EUA. Evite bloqueios amplos sem testes.<\/p> <\/div> <div class=\"schema-faq-section\" id=\"faq-question-1770068023514\"><strong class=\"schema-faq-question\">Preciso reiniciar o servidor ap\u00f3s alterar o CSF?<\/strong> <p class=\"schema-faq-answer\">N\u00e3o. Basta recarregar as regras com:<br\/><code>csf -r<\/code><\/p> <\/div> <div class=\"schema-faq-section\" id=\"faq-question-1770068043833\"><strong class=\"schema-faq-question\">Posso combinar bloqueio por pa\u00eds com <a href=\"https:\/\/helpsysadmin.com.br\/blog\/como-instalar-crowdsec\/\" data-internallinksmanager029f6b8e52c=\"2\" title=\"CrowdSec\" target=\"_blank\" rel=\"noopener\">CrowdSec<\/a> ?<\/strong> <p class=\"schema-faq-answer\">Sim, e \u00e9 altamente recomendado.<br>O CSF faz o bloqueio geogr\u00e1fico, enquanto <strong><a href=\"https:\/\/helpsysadmin.com.br\/blog\/como-instalar-crowdsec\/\" data-internallinksmanager029f6b8e52c=\"2\" title=\"CrowdSec\" target=\"_blank\" rel=\"noopener\">CrowdSec<\/a> analisa comportamento<\/strong>, oferecendo uma camada extra de seguran\u00e7a.<\/p> <\/div> <div class=\"schema-faq-section\" id=\"faq-question-1770068087770\"><strong class=\"schema-faq-question\">Existe alternativa ao bloqueio por pa\u00eds no CSF?<\/strong> <p class=\"schema-faq-answer\">Sim. Algumas alternativas s\u00e3o:<br\/><a href=\"https:\/\/helpsysadmin.com.br\/blog\/como-instalar-crowdsec\/\" data-internallinksmanager029f6b8e52c=\"2\" title=\"CrowdSec\" target=\"_blank\" rel=\"noopener\">CrowdSec<\/a> (bloqueio comportamental)<br\/>Cloudflare WAF<br\/>ModSecurity<br\/>Rate limit no Nginx<\/p> <\/div> <\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-veja-mais\">Veja Mais:<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><a href=\"https:\/\/helpsysadmin.com.br\/blog\/hardening-servidores-linux-seguranca\/\" target=\"_blank\" rel=\"noreferrer noopener\">Hardening de Servidores Linux: Guia de Seguran\u00e7a Passo a Passo<\/a><\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><a href=\"https:\/\/helpsysadmin.com.br\/blog\/fail2ban-vs-crowdsec-em-producao\/\" target=\"_blank\" rel=\"noreferrer noopener\">Fail2Ban vs CrowdSec em Produ\u00e7\u00e3o: Qual \u00e9 a Melhor Solu\u00e7\u00e3o de Seguran\u00e7a para Servidores Linux?<\/a><\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><a href=\"https:\/\/helpsysadmin.com.br\/blog\/ssh-seguro-alem-da-porta\/\" target=\"_blank\" rel=\"noreferrer noopener\">SSH seguro al\u00e9m de mudar a porta<\/a><\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/helpsysadmin.com.br\/blog\/seguranca-wordpress-servidor\/\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>Seguran\u00e7a no WordPress em n\u00edvel de servidor<\/strong><\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/helpsysadmin.com.br\/blog\/en\/how-do-i-add-security-headers-using-cloudflare\/\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>How do I add security headers using Cloudflare?<\/strong><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Bloquear pa\u00eds csf. Bloquear acessos por pa\u00eds \u00e9 uma pr\u00e1tica comum para reduzir ataques automatizados, for\u00e7a bruta e tr\u00e1fego malicioso. O ConfigServer [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":2803,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9,1279,89],"tags":[90,11,1362,13,18,3,16],"class_list":["post-2802","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-gerenciamento-servidor","category-linux","category-seguranca-do-servidor","tag-almalinux","tag-cpanel","tag-directadmin","tag-linux","tag-seguranca","tag-servidor-linux","tag-ubuntu"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.9 (Yoast SEO v27.9) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Como bloquear acesso por pa\u00eds no CSF (ConfigServer Firewall)<\/title>\n<meta name=\"description\" content=\"Aprenda como bloquear acesso por pa\u00eds no ConfigServer Firewall (CSF) usando GeoIP. Guia pr\u00e1tico, seguro e otimizado para servidores Linux\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/\" \/>\n<meta property=\"og:locale\" content=\"pt_BR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Como bloquear acesso de pa\u00eds com ConfigServer Firewall (CSF)\" \/>\n<meta property=\"og:description\" content=\"Aprenda como bloquear acesso por pa\u00eds no ConfigServer Firewall (CSF) usando GeoIP. Guia pr\u00e1tico, seguro e otimizado para servidores Linux\" \/>\n<meta property=\"og:url\" content=\"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog HelpSysAdmin\" \/>\n<meta property=\"article:published_time\" content=\"2026-02-02T21:23:24+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-04-01T09:46:53+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/mlkpd8g42nae.i.optimole.com\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/helpsysadmin.com.br\/blog\/wp-content\/uploads\/2026\/02\/csf.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"640\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"HelpSysAdmin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@brhelpsysad\" \/>\n<meta name=\"twitter:site\" content=\"@brhelpsysad\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/\"},\"author\":{\"name\":\"HelpSysAdmin\",\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/#\\\/schema\\\/person\\\/bdbe3d7d71a0c6a3cb474c18da574efb\"},\"headline\":\"Como bloquear acesso de pa\u00eds com ConfigServer Firewall (CSF)\",\"datePublished\":\"2026-02-02T21:23:24+00:00\",\"dateModified\":\"2026-04-01T09:46:53+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/\"},\"wordCount\":1059,\"publisher\":{\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\/\\/helpsysadmin.com.br\\/blog\\/wp-content\\/uploads\\/2026\\/02\\/csf.webp\",\"keywords\":[\"almalinux\",\"cpanel\",\"DirectAdmin\",\"linux\",\"seguran\u00e7a\",\"servidor linux\",\"ubuntu\"],\"articleSection\":[\"Gerenciamento de Servidor\",\"Linux\",\"Seguran\u00e7a\"],\"inLanguage\":\"pt-BR\"},{\"@type\":[\"WebPage\",\"FAQPage\"],\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/\",\"url\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/\",\"name\":\"Como bloquear acesso por pa\u00eds no CSF (ConfigServer Firewall)\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\/\\/helpsysadmin.com.br\\/blog\\/wp-content\\/uploads\\/2026\\/02\\/csf.webp\",\"datePublished\":\"2026-02-02T21:23:24+00:00\",\"dateModified\":\"2026-04-01T09:46:53+00:00\",\"description\":\"Aprenda como bloquear acesso por pa\u00eds no ConfigServer Firewall (CSF) usando GeoIP. Guia pr\u00e1tico, seguro e otimizado para servidores Linux\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#breadcrumb\"},\"mainEntity\":[{\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#faq-question-1770067820731\"},{\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#faq-question-1770067854489\"},{\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#faq-question-1770067879766\"},{\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#faq-question-1770067917958\"},{\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#faq-question-1770067929912\"},{\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#faq-question-1770067978096\"},{\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#faq-question-1770067990257\"},{\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#faq-question-1770068023514\"},{\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#faq-question-1770068043833\"},{\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#faq-question-1770068087770\"}],\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#primaryimage\",\"url\":\"https:\\/\\/helpsysadmin.com.br\\/blog\\/wp-content\\/uploads\\/2026\\/02\\/csf.webp\",\"contentUrl\":\"https:\\/\\/helpsysadmin.com.br\\/blog\\/wp-content\\/uploads\\/2026\\/02\\/csf.webp\",\"width\":640,\"height\":400},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Como bloquear acesso de pa\u00eds com ConfigServer Firewall (CSF)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/\",\"name\":\"Blog HelpSysAdmin\",\"description\":\"Webserver linux blog\",\"publisher\":{\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/#organization\"},\"alternateName\":\"HelpSysAdmin Blog\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-BR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/#organization\",\"name\":\"HelpSysAdmin Gerenciamento de Servidores\",\"alternateName\":\"HelpSysAdmin\",\"url\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\/\\/mlkpd8g42nae.i.optimole.com\\/w:512\\/h:512\\/q:mauto\\/f:best\\/https:\\/\\/helpsysadmin.com.br\\/blog\\/wp-content\\/uploads\\/2020\\/12\\/favicon.png\",\"contentUrl\":\"https:\\/\\/mlkpd8g42nae.i.optimole.com\\/w:512\\/h:512\\/q:mauto\\/f:best\\/https:\\/\\/helpsysadmin.com.br\\/blog\\/wp-content\\/uploads\\/2020\\/12\\/favicon.png\",\"width\":512,\"height\":512,\"caption\":\"HelpSysAdmin Gerenciamento de Servidores\"},\"image\":{\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/brhelpsysad\",\"https:\\\/\\\/mastodon.social\\\/@helpsysadmin\"],\"description\":\"Oferecemos o gerenciamento de servidores dedicados, vps ou cloud. Apresentamos a melhor experi\u00eancia em atendimento e servi\u00e7o. Nosso time cuidar\u00e1 do seu servidor com backups, an\u00e1lises constantes, ajustes de seguran\u00e7a, realiza\u00e7\u00e3o de manuten\u00e7\u00e3o preventiva e corretiva, otimiza\u00e7\u00e3o de performance al\u00e9m de monitoramento 24\u00d77 com suporte Pr\u00f3 Ativo.\",\"numberOfEmployees\":{\"@type\":\"QuantitativeValue\",\"minValue\":\"1\",\"maxValue\":\"10\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/#\\\/schema\\\/person\\\/bdbe3d7d71a0c6a3cb474c18da574efb\",\"name\":\"HelpSysAdmin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/efc0007e6a313a844b72de257e05c6083b07b6ecc6983a4f71e06293ff2e22fd?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/efc0007e6a313a844b72de257e05c6083b07b6ecc6983a4f71e06293ff2e22fd?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/efc0007e6a313a844b72de257e05c6083b07b6ecc6983a4f71e06293ff2e22fd?s=96&d=mm&r=g\",\"caption\":\"HelpSysAdmin\"},\"sameAs\":[\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/\"]},{\"@type\":\"Question\",\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#faq-question-1770067820731\",\"position\":1,\"url\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#faq-question-1770067820731\",\"name\":\"O que \u00e9 bloqueio por pa\u00eds no CSF?\",\"answerCount\":1,\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"O bloqueio por pa\u00eds no CSF (ConfigServer Firewall) usa geolocaliza\u00e7\u00e3o de IP para impedir conex\u00f5es originadas de pa\u00edses espec\u00edficos, ajudando a reduzir ataques automatizados e tr\u00e1fego malicioso no servidor.\",\"inLanguage\":\"pt-BR\"},\"inLanguage\":\"pt-BR\"},{\"@type\":\"Question\",\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#faq-question-1770067854489\",\"position\":2,\"url\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#faq-question-1770067854489\",\"name\":\"Bloquear pa\u00edses no CSF melhora a seguran\u00e7a?\",\"answerCount\":1,\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Sim. O bloqueio por pa\u00eds reduz significativamente tentativas de for\u00e7a bruta, scans de portas e ataques a servi\u00e7os como SSH, WordPress e pain\u00e9is administrativos.\",\"inLanguage\":\"pt-BR\"},\"inLanguage\":\"pt-BR\"},{\"@type\":\"Question\",\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#faq-question-1770067879766\",\"position\":3,\"url\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#faq-question-1770067879766\",\"name\":\"O bloqueio por pa\u00eds afeta o desempenho do servidor?\",\"answerCount\":1,\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"N\u00e3o de forma negativa. Pelo contr\u00e1rio: o CSF bloqueia conex\u00f5es ainda no n\u00edvel do firewall, diminuindo o consumo de CPU, mem\u00f3ria e processos do servidor web e PHP.\",\"inLanguage\":\"pt-BR\"},\"inLanguage\":\"pt-BR\"},{\"@type\":\"Question\",\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#faq-question-1770067917958\",\"position\":4,\"url\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#faq-question-1770067917958\",\"name\":\"Qual a diferen\u00e7a entre CC_DENY e CC_ALLOW no CSF?\",\"answerCount\":1,\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"<strong>CC_DENY<\\\/strong> bloqueia pa\u00edses espec\u00edficos e permite o resto.<br\\\/><strong>CC_ALLOW<\\\/strong> permite apenas os pa\u00edses definidos e bloqueia todos os outros automaticamente.\",\"inLanguage\":\"pt-BR\"},\"inLanguage\":\"pt-BR\"},{\"@type\":\"Question\",\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#faq-question-1770067929912\",\"position\":5,\"url\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#faq-question-1770067929912\",\"name\":\"Posso permitir apenas o Brasil no CSF?\",\"answerCount\":1,\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Sim. Basta configurar:<br\\\/>CC_ALLOW = \\\"BR\\\"<br\\\/>Isso far\u00e1 com que apenas IPs do Brasil tenham acesso ao servidor.\",\"inLanguage\":\"pt-BR\"},\"inLanguage\":\"pt-BR\"},{\"@type\":\"Question\",\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#faq-question-1770067978096\",\"position\":6,\"url\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#faq-question-1770067978096\",\"name\":\"\u00c9 seguro bloquear pa\u00edses inteiros?\",\"answerCount\":1,\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Depende do tipo de site. Para sites locais, pain\u00e9is administrativos ou APIs privadas, \u00e9 seguro e recomendado. Para sites globais ou e-commerces internacionais, pode causar bloqueios indevidos.\",\"inLanguage\":\"pt-BR\"},\"inLanguage\":\"pt-BR\"},{\"@type\":\"Question\",\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#faq-question-1770067990257\",\"position\":7,\"url\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#faq-question-1770067990257\",\"name\":\"Bloquear pa\u00edses pode afetar Googlebot ou SEO?\",\"answerCount\":1,\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"N\u00e3o, desde que voc\u00ea <strong>n\u00e3o bloqueie pa\u00edses usados pelo Googlebot<\\\/strong>. O Google usa IPs de v\u00e1rios pa\u00edses, principalmente EUA. Evite bloqueios amplos sem testes.\",\"inLanguage\":\"pt-BR\"},\"inLanguage\":\"pt-BR\"},{\"@type\":\"Question\",\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#faq-question-1770068023514\",\"position\":8,\"url\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#faq-question-1770068023514\",\"name\":\"Preciso reiniciar o servidor ap\u00f3s alterar o CSF?\",\"answerCount\":1,\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"N\u00e3o. Basta recarregar as regras com:<br\\\/>csf -r\",\"inLanguage\":\"pt-BR\"},\"inLanguage\":\"pt-BR\"},{\"@type\":\"Question\",\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#faq-question-1770068043833\",\"position\":9,\"url\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#faq-question-1770068043833\",\"name\":\"Posso combinar bloqueio por pa\u00eds com CrowdSec ?\",\"answerCount\":1,\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Sim, e \u00e9 altamente recomendado.<br>O CSF faz o bloqueio geogr\u00e1fico, enquanto <strong>CrowdSec analisa comportamento<\\\/strong>, oferecendo uma camada extra de seguran\u00e7a.\",\"inLanguage\":\"pt-BR\"},\"inLanguage\":\"pt-BR\"},{\"@type\":\"Question\",\"@id\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#faq-question-1770068087770\",\"position\":10,\"url\":\"https:\\\/\\\/helpsysadmin.com.br\\\/blog\\\/bloquear-acesso-por-pais-csf\\\/#faq-question-1770068087770\",\"name\":\"Existe alternativa ao bloqueio por pa\u00eds no CSF?\",\"answerCount\":1,\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Sim. Algumas alternativas s\u00e3o:<br\\\/>CrowdSec (bloqueio comportamental)<br\\\/>Cloudflare WAF<br\\\/>ModSecurity<br\\\/>Rate limit no Nginx\",\"inLanguage\":\"pt-BR\"},\"inLanguage\":\"pt-BR\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Como bloquear acesso por pa\u00eds no CSF (ConfigServer Firewall)","description":"Aprenda como bloquear acesso por pa\u00eds no ConfigServer Firewall (CSF) usando GeoIP. Guia pr\u00e1tico, seguro e otimizado para servidores Linux","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/","og_locale":"pt_BR","og_type":"article","og_title":"Como bloquear acesso de pa\u00eds com ConfigServer Firewall (CSF)","og_description":"Aprenda como bloquear acesso por pa\u00eds no ConfigServer Firewall (CSF) usando GeoIP. Guia pr\u00e1tico, seguro e otimizado para servidores Linux","og_url":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/","og_site_name":"Blog HelpSysAdmin","article_published_time":"2026-02-02T21:23:24+00:00","article_modified_time":"2026-04-01T09:46:53+00:00","og_image":[{"width":640,"height":400,"url":"https:\/\/mlkpd8g42nae.i.optimole.com\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/helpsysadmin.com.br\/blog\/wp-content\/uploads\/2026\/02\/csf.webp","type":"image\/webp"}],"author":"HelpSysAdmin","twitter_card":"summary_large_image","twitter_creator":"@brhelpsysad","twitter_site":"@brhelpsysad","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#article","isPartOf":{"@id":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/"},"author":{"name":"HelpSysAdmin","@id":"https:\/\/helpsysadmin.com.br\/blog\/#\/schema\/person\/bdbe3d7d71a0c6a3cb474c18da574efb"},"headline":"Como bloquear acesso de pa\u00eds com ConfigServer Firewall (CSF)","datePublished":"2026-02-02T21:23:24+00:00","dateModified":"2026-04-01T09:46:53+00:00","mainEntityOfPage":{"@id":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/"},"wordCount":1059,"publisher":{"@id":"https:\/\/helpsysadmin.com.br\/blog\/#organization"},"image":{"@id":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#primaryimage"},"thumbnailUrl":"https:\/\/mlkpd8g42nae.i.optimole.com\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/helpsysadmin.com.br\/blog\/wp-content\/uploads\/2026\/02\/csf.webp","keywords":["almalinux","cpanel","DirectAdmin","linux","seguran\u00e7a","servidor linux","ubuntu"],"articleSection":["Gerenciamento de Servidor","Linux","Seguran\u00e7a"],"inLanguage":"pt-BR"},{"@type":["WebPage","FAQPage"],"@id":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/","url":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/","name":"Como bloquear acesso por pa\u00eds no CSF (ConfigServer Firewall)","isPartOf":{"@id":"https:\/\/helpsysadmin.com.br\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#primaryimage"},"image":{"@id":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#primaryimage"},"thumbnailUrl":"https:\/\/mlkpd8g42nae.i.optimole.com\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/helpsysadmin.com.br\/blog\/wp-content\/uploads\/2026\/02\/csf.webp","datePublished":"2026-02-02T21:23:24+00:00","dateModified":"2026-04-01T09:46:53+00:00","description":"Aprenda como bloquear acesso por pa\u00eds no ConfigServer Firewall (CSF) usando GeoIP. Guia pr\u00e1tico, seguro e otimizado para servidores Linux","breadcrumb":{"@id":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#breadcrumb"},"mainEntity":[{"@id":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#faq-question-1770067820731"},{"@id":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#faq-question-1770067854489"},{"@id":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#faq-question-1770067879766"},{"@id":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#faq-question-1770067917958"},{"@id":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#faq-question-1770067929912"},{"@id":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#faq-question-1770067978096"},{"@id":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#faq-question-1770067990257"},{"@id":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#faq-question-1770068023514"},{"@id":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#faq-question-1770068043833"},{"@id":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#faq-question-1770068087770"}],"inLanguage":"pt-BR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/"]}]},{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#primaryimage","url":"https:\/\/mlkpd8g42nae.i.optimole.com\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/helpsysadmin.com.br\/blog\/wp-content\/uploads\/2026\/02\/csf.webp","contentUrl":"https:\/\/mlkpd8g42nae.i.optimole.com\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/helpsysadmin.com.br\/blog\/wp-content\/uploads\/2026\/02\/csf.webp","width":640,"height":400},{"@type":"BreadcrumbList","@id":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/helpsysadmin.com.br\/blog\/"},{"@type":"ListItem","position":2,"name":"Como bloquear acesso de pa\u00eds com ConfigServer Firewall (CSF)"}]},{"@type":"WebSite","@id":"https:\/\/helpsysadmin.com.br\/blog\/#website","url":"https:\/\/helpsysadmin.com.br\/blog\/","name":"Blog HelpSysAdmin","description":"Webserver linux blog","publisher":{"@id":"https:\/\/helpsysadmin.com.br\/blog\/#organization"},"alternateName":"HelpSysAdmin Blog","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/helpsysadmin.com.br\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-BR"},{"@type":"Organization","@id":"https:\/\/helpsysadmin.com.br\/blog\/#organization","name":"HelpSysAdmin Gerenciamento de Servidores","alternateName":"HelpSysAdmin","url":"https:\/\/helpsysadmin.com.br\/blog\/","logo":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/helpsysadmin.com.br\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/mlkpd8g42nae.i.optimole.com\/w:512\/h:512\/q:mauto\/f:best\/https:\/\/helpsysadmin.com.br\/blog\/wp-content\/uploads\/2020\/12\/favicon.png","contentUrl":"https:\/\/mlkpd8g42nae.i.optimole.com\/w:512\/h:512\/q:mauto\/f:best\/https:\/\/helpsysadmin.com.br\/blog\/wp-content\/uploads\/2020\/12\/favicon.png","width":512,"height":512,"caption":"HelpSysAdmin Gerenciamento de Servidores"},"image":{"@id":"https:\/\/helpsysadmin.com.br\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/brhelpsysad","https:\/\/mastodon.social\/@helpsysadmin"],"description":"Oferecemos o gerenciamento de servidores dedicados, vps ou cloud. Apresentamos a melhor experi\u00eancia em atendimento e servi\u00e7o. Nosso time cuidar\u00e1 do seu servidor com backups, an\u00e1lises constantes, ajustes de seguran\u00e7a, realiza\u00e7\u00e3o de manuten\u00e7\u00e3o preventiva e corretiva, otimiza\u00e7\u00e3o de performance al\u00e9m de monitoramento 24\u00d77 com suporte Pr\u00f3 Ativo.","numberOfEmployees":{"@type":"QuantitativeValue","minValue":"1","maxValue":"10"}},{"@type":"Person","@id":"https:\/\/helpsysadmin.com.br\/blog\/#\/schema\/person\/bdbe3d7d71a0c6a3cb474c18da574efb","name":"HelpSysAdmin","image":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/secure.gravatar.com\/avatar\/efc0007e6a313a844b72de257e05c6083b07b6ecc6983a4f71e06293ff2e22fd?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/efc0007e6a313a844b72de257e05c6083b07b6ecc6983a4f71e06293ff2e22fd?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/efc0007e6a313a844b72de257e05c6083b07b6ecc6983a4f71e06293ff2e22fd?s=96&d=mm&r=g","caption":"HelpSysAdmin"},"sameAs":["https:\/\/helpsysadmin.com.br\/blog\/"]},{"@type":"Question","@id":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#faq-question-1770067820731","position":1,"url":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#faq-question-1770067820731","name":"O que \u00e9 bloqueio por pa\u00eds no CSF?","answerCount":1,"acceptedAnswer":{"@type":"Answer","text":"O bloqueio por pa\u00eds no CSF (ConfigServer Firewall) usa geolocaliza\u00e7\u00e3o de IP para impedir conex\u00f5es originadas de pa\u00edses espec\u00edficos, ajudando a reduzir ataques automatizados e tr\u00e1fego malicioso no servidor.","inLanguage":"pt-BR"},"inLanguage":"pt-BR"},{"@type":"Question","@id":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#faq-question-1770067854489","position":2,"url":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#faq-question-1770067854489","name":"Bloquear pa\u00edses no CSF melhora a seguran\u00e7a?","answerCount":1,"acceptedAnswer":{"@type":"Answer","text":"Sim. O bloqueio por pa\u00eds reduz significativamente tentativas de for\u00e7a bruta, scans de portas e ataques a servi\u00e7os como SSH, WordPress e pain\u00e9is administrativos.","inLanguage":"pt-BR"},"inLanguage":"pt-BR"},{"@type":"Question","@id":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#faq-question-1770067879766","position":3,"url":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#faq-question-1770067879766","name":"O bloqueio por pa\u00eds afeta o desempenho do servidor?","answerCount":1,"acceptedAnswer":{"@type":"Answer","text":"N\u00e3o de forma negativa. Pelo contr\u00e1rio: o CSF bloqueia conex\u00f5es ainda no n\u00edvel do firewall, diminuindo o consumo de CPU, mem\u00f3ria e processos do servidor web e PHP.","inLanguage":"pt-BR"},"inLanguage":"pt-BR"},{"@type":"Question","@id":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#faq-question-1770067917958","position":4,"url":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#faq-question-1770067917958","name":"Qual a diferen\u00e7a entre CC_DENY e CC_ALLOW no CSF?","answerCount":1,"acceptedAnswer":{"@type":"Answer","text":"<strong>CC_DENY<\/strong> bloqueia pa\u00edses espec\u00edficos e permite o resto.<br\/><strong>CC_ALLOW<\/strong> permite apenas os pa\u00edses definidos e bloqueia todos os outros automaticamente.","inLanguage":"pt-BR"},"inLanguage":"pt-BR"},{"@type":"Question","@id":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#faq-question-1770067929912","position":5,"url":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#faq-question-1770067929912","name":"Posso permitir apenas o Brasil no CSF?","answerCount":1,"acceptedAnswer":{"@type":"Answer","text":"Sim. Basta configurar:<br\/>CC_ALLOW = \"BR\"<br\/>Isso far\u00e1 com que apenas IPs do Brasil tenham acesso ao servidor.","inLanguage":"pt-BR"},"inLanguage":"pt-BR"},{"@type":"Question","@id":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#faq-question-1770067978096","position":6,"url":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#faq-question-1770067978096","name":"\u00c9 seguro bloquear pa\u00edses inteiros?","answerCount":1,"acceptedAnswer":{"@type":"Answer","text":"Depende do tipo de site. Para sites locais, pain\u00e9is administrativos ou APIs privadas, \u00e9 seguro e recomendado. Para sites globais ou e-commerces internacionais, pode causar bloqueios indevidos.","inLanguage":"pt-BR"},"inLanguage":"pt-BR"},{"@type":"Question","@id":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#faq-question-1770067990257","position":7,"url":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#faq-question-1770067990257","name":"Bloquear pa\u00edses pode afetar Googlebot ou SEO?","answerCount":1,"acceptedAnswer":{"@type":"Answer","text":"N\u00e3o, desde que voc\u00ea <strong>n\u00e3o bloqueie pa\u00edses usados pelo Googlebot<\/strong>. O Google usa IPs de v\u00e1rios pa\u00edses, principalmente EUA. Evite bloqueios amplos sem testes.","inLanguage":"pt-BR"},"inLanguage":"pt-BR"},{"@type":"Question","@id":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#faq-question-1770068023514","position":8,"url":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#faq-question-1770068023514","name":"Preciso reiniciar o servidor ap\u00f3s alterar o CSF?","answerCount":1,"acceptedAnswer":{"@type":"Answer","text":"N\u00e3o. Basta recarregar as regras com:<br\/>csf -r","inLanguage":"pt-BR"},"inLanguage":"pt-BR"},{"@type":"Question","@id":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#faq-question-1770068043833","position":9,"url":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#faq-question-1770068043833","name":"Posso combinar bloqueio por pa\u00eds com CrowdSec ?","answerCount":1,"acceptedAnswer":{"@type":"Answer","text":"Sim, e \u00e9 altamente recomendado.<br>O CSF faz o bloqueio geogr\u00e1fico, enquanto <strong>CrowdSec analisa comportamento<\/strong>, oferecendo uma camada extra de seguran\u00e7a.","inLanguage":"pt-BR"},"inLanguage":"pt-BR"},{"@type":"Question","@id":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#faq-question-1770068087770","position":10,"url":"https:\/\/helpsysadmin.com.br\/blog\/bloquear-acesso-por-pais-csf\/#faq-question-1770068087770","name":"Existe alternativa ao bloqueio por pa\u00eds no CSF?","answerCount":1,"acceptedAnswer":{"@type":"Answer","text":"Sim. Algumas alternativas s\u00e3o:<br\/>CrowdSec (bloqueio comportamental)<br\/>Cloudflare WAF<br\/>ModSecurity<br\/>Rate limit no Nginx","inLanguage":"pt-BR"},"inLanguage":"pt-BR"}]}},"lang":"pt","translations":{"pt":2802},"pll_sync_post":{},"_links":{"self":[{"href":"https:\/\/helpsysadmin.com.br\/blog\/wp-json\/wp\/v2\/posts\/2802","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/helpsysadmin.com.br\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/helpsysadmin.com.br\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/helpsysadmin.com.br\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/helpsysadmin.com.br\/blog\/wp-json\/wp\/v2\/comments?post=2802"}],"version-history":[{"count":7,"href":"https:\/\/helpsysadmin.com.br\/blog\/wp-json\/wp\/v2\/posts\/2802\/revisions"}],"predecessor-version":[{"id":5302,"href":"https:\/\/helpsysadmin.com.br\/blog\/wp-json\/wp\/v2\/posts\/2802\/revisions\/5302"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/helpsysadmin.com.br\/blog\/wp-json\/wp\/v2\/media\/2803"}],"wp:attachment":[{"href":"https:\/\/helpsysadmin.com.br\/blog\/wp-json\/wp\/v2\/media?parent=2802"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/helpsysadmin.com.br\/blog\/wp-json\/wp\/v2\/categories?post=2802"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/helpsysadmin.com.br\/blog\/wp-json\/wp\/v2\/tags?post=2802"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}