diff --git a/opnsense/readme.md b/opnsense/readme.md
index dcbbb4c..3e2602f 100644
--- a/opnsense/readme.md
+++ b/opnsense/readme.md
@@ -384,6 +384,10 @@ vlan tag will be `30`, the subnest will be `10.30.30.0/24`
If running opnsense as a VM under xcpng then vlans are presented as regular
interfaces. Xcpng is doing tagging and untagging, for opnsense they are just NICs.
+* Assing them
+* Assign them static IPv4 address
+
+
### ESXI
@@ -606,20 +610,22 @@ Following [the official documentation](https://docs.opnsense.org/manual/how-tos/
* register account on [maxmind.com](https://www.maxmind.com/en/geolite2/signup),
this will give access to info which IP ranges belong to which country
-* in the freshly created maxmind account generate new license
-* in this url replace `My_License_key` with your actual license key
- `https://download.maxmind.com/app/geoip_download?edition_id=GeoLite2-Country-CSV&license_key=My_License_key&suffix=zip`
+* in the freshly created maxmind account generate new license and note accountID
+* in this url replace `AccountID` and `LicenseKey` with your info
+ `https://AccountID:LicenseKey@download.maxmind.com/geoip/databases/GeoLite2-Country-CSV/download?suffix=zip`
* paste it in browser, if its working it should download zip file with the IP info
### in opnsense
-* Firewall: Aliases: GeoIP tab - paste the url, click apply
+* Firewall: Aliases: GeoIP tab - paste the url, click apply
+ should see last update and range change to some values
* switch to Aliases tab, create new geoip alias and select your own country
[something like this](https://i.imgur.com/vu2slRd.png)
* Firewall: Rules: WAN - create new rule
block; source invert; source geoip alias we created;
enable log packets that are handled by this rule; add description
[something like this](https://i.imgur.com/qi7sL9J.png)
+* move the new rule at the top of your rules, before any port opens
Observe it in action in Firewall: Log Files: Live View