Project

General

Profile

Actions
Copy link

Feature #14324

open

pfBlockerNG to use geoLite "country" instead of "registered_country"

Added by Pierre Chopot over 1 year ago. Updated 5 months ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
pfBlockerNG
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Plus Target Version:

Description

Hello,

Explanations here: https://forum.netgate.com/topic/179567/country-vs-registered-country/4?_=1682682466761

I am using a Mulvad VPN to test pfBlockerNG (up to date). If I choose a Swiss (Zürich, ip 193.32.127.221) out on the Mulvad network, and if I authorize Switzerland I cannot go through. In order to be able to go through I have to authorize Sweden.
I made some manual queries on the GeoLite2 Maxmind database (used by pfBlockerNG if I understand correctly) for that IP and the database is returning the following information:

- country: Switzerland
- registered_country: Sweden

So it seems that pfBlockerNG is using the "registered_country" information instead of the "country" information. The "registered_country" is the country where the IP was purchased, the "country" information being the country where the IP is really used. Mulvad is a swedish company, they probably purchased a lot op IP's in Sweden but are using them everywher in the world ...

So my idea is that pfBlockerNG shoud use the "country" information, not the "registered_country" ... well if that's the case and if my tests do make sense ...

Thanks for listening,
Pierre.

Actions
Copy link

Also available in: Atom PDF