search for: maxmind

Hi Specs in subject line: CentOS 6.X all latest patches), iptables 1.47, Apache2.2 I use the Geolite legacy databases together with iptables 1.47 to filter traffic for a variety of ports and only allow .AU traffic to have access. Maxmind (https://dev.maxmind.com/geoip/geoip2/geolite2/) changed the default DB to the latest version which is GeoLite2, this leaves all users in need of the old Geolite Legacy database in the dark, they cannot update. If I download a later version of xtables it will complain that it requires iptable>1...

...ic to have access. > I use ipdeny's aggregated country lists to do the same thing: http://www.ipdeny.com/ipblocks/data/aggregated/ I just feed this data directly into ipset/iptables via a script running on my firewall (not a C6 box). ipset is a really efficient way of doing this. > Maxmind (https://dev.maxmind.com/geoip/geoip2/geolite2/) changed the default DB to the latest version which is GeoLite2, this leaves all users in need of the old Geolite Legacy database in the dark, they cannot update. > > If I download a later version of xtables it will complain that it requires ip...

On Fri, 12 Apr 2019, mj wrote: > What we do is: use https://github.com/trick77/ipset-blacklist to block IPs > (from various existing blacklists) at the iptables level using an ipset. "www.blocklist.de" is a nifty source. Could you suggest other publically available blacklists? > That way, the known bad IPs never even talk to dovecot, but are dropped > immediately. We

...anks, it did, cleared up conflicting info I found on the Internet. I also wanted to go the "other way": disallow everything but 2 countries (AU,NZ). There are even more conflicting ideas about how to do this, but I figured it out. Also I cannot see a difference in speed between using (maxmind) -A filter_countries -m geoip --src-cc AU,NZ -j ACCEPT and (ipdeny) -A filter_countries -m set --set au.geoblock src -j ACCEPT which is really good! Jobst -- The future isn't what it used to be (it never was). | |0| | Jobst Schmalenbach, General Manager | | |0| Barrett &a...

...country code </IfModule> ---- On C7 this file goes here /etc/httpd/conf.d/geoip.conf Make sure that /etc/httpd/conf.modules.d/10-geoip.conf loads the library file, and is not remarked out with a #. There is more info on mod_geoip here (but use the installation from Epel) though: http://dev.maxmind.com/geoip/legacy/mod_geoip2/ I run a server for personal family purposes, and use this to block many of the places my family doesn't live... Al McCann Certe, Toto, sentio nos in Kansate non iam adesse.

In my new Centos7 BIND DNS server, I am seeing messages in logwatch about GeoIP. Something new for me to learn about, and it seems, configure. Checking to see what packages are available I find: GeoIP.armv7hl 1.5.0-11.el7 @centos-base_rbf GeoIP-data.noarch 1.5.0-11.el7 base GeoIP-devel.armv7hl 1.5.0-11.el7 base

Thanks Benny. I should've said I saw AllowNets but in researching it looked like it expected a smaller comma separated list, not hundreds of IP blocks. Is that what you are using to accomplish this? Thanks, -Terry iPhone says Hello World! > On Sep 16, 2015, at 6:31 PM, Benny Pedersen <me at junc.eu> wrote: > > Terry Barnum skrev den 2015-09-17 02:32: > >> I've

First time subscriber/poster My attached patch allows GeoIP support for the free GeoIP database and C api from http://www.maxmind.com/ Install GeoIP before compiling and it should work. It adds 2 options to sshd_config DenyCountry Deny access from a specific country based on GeoIP lookup. Use multiple DenyCountry entries to deny access from multiple countries. DenyCountry takes precedence over AllowCountry AllowCountry...

...ion, but you can surely adjust it to instead show caller and callee location connected. I think the cool part is that it really tries to get the most accurate coordinates for every destination, down to the city level, by using text (country code, ISO, lat/long) and MySQL (ITU self-compiled DB + MaxMind public DB) based databases, which are included. Here are some demos: http://truemetal.org/universe/voipgmap/live_demo1.html http://truemetal.org/universe/voipgmap/live_demo2.html http://truemetal.org/universe/voipgmap/live_demo3.html http://truemetal.org/universe/voipgmap/live_demo4.html First...

Hi, I'm wondering whether or not it is achievable to build a web based click2dial application that could automatically detect that a user is connected from office or home. Another option is to directly ask user or let them change default option but having this automatically detected is a bonus. Has anyone tried to build such location based SIP services ? I've read few lines about

I have a small problem with webalizer. I use it to analyze logs of a small web server hosting a single site, and the only thing I am interested in from webalizer is the piechart diagram it produces about the geographic distribution of people visiting the site. However, the piechart it produces gives me a very crude information, with 50% or so of visitors belonging to "unresolved",

...; May 11 20:03:41 dc.exza.local named[2506]: reading built-in trusted keys from file '/etc/named.iscdlv.key' May 11 20:03:41 dc.exza.local named[2506]: initializing GeoIP Country (IPv4) (type 1) DB May 11 20:03:41 dc.exza.local named[2506]: GEO-106FREE 20160607 Build 1 Copyright (c) 2016 MaxMind May 11 20:03:41 dc.exza.local named[2506]: initializing GeoIP Country (IPv6) (type 12) DB May 11 20:03:41 dc.exza.local named[2506]: GEO-106FREE 20160607 Build 1 Copy May 11 20:03:41 dc.exza.local named[2506]: GeoIP City (IPv4) (type 2) DB not available May 11 20:03:41 dc.exza.local named[2506]:...

Hello, My home system on a DSL line is getting worn out by bad behavior robots. Awhile back, I created a .htaccess file that block countries by IP blocks. Its 2MB in size. I have been running Linux since Slackware 1.0 and moved to Redhat around 2.0. I started after running a BBS using a doorway for newsgroups. Been hooked ever since. So, today, I tried following the directions for

On Mon, Jan 14, 2019 at 07:29:45AM +0000, Phil Perry (pperry at elrepo.org) wrote: > On 14/01/2019 07:09, Jobst Schmalenbach wrote: > > Hi > I use ipdeny's aggregated country lists to do the same thing: > > http://www.ipdeny.com/ipblocks/data/aggregated/ > > I just feed this data directly into ipset/iptables via a script running on > my firewall (not a C6 box).

I block all my email ports except 25 from countries where I am not going to be sending or receiving email. I also block many datacenters, but blocking Digital Ocean, Vultur and AWS will get you 90%of the way there. You will need to use 587, that is no auth on 25. Again no blocking on 25, just block the other email ports. I get maybe one attempt to log into my email account a week. Yeah not as

Hi Maxence, > Fyi, i've updated to 4.7.1, the dbcheck still not fix the broken links, > is the fix you talk about planned for a future release ? > > Our customer reported me, some users have issues when their logon server > is DC1 but not when it's DC2. > > On DC1 some users have access to all shares, some doesn't have any > access at all. actually this last

...om '/etc/named.conf' May 10 13:19:44 vdc2 named[23773]: reading built-in trusted keys from file '/etc/named.iscdlv.key' May 10 13:19:44 vdc2 named[23773]: initializing GeoIP Country (IPv4) (type 1) DB May 10 13:19:44 vdc2 named[23773]: GEO-106FREE 20160607 Build 1 Copyright (c) 2016 MaxMind May 10 13:19:44 vdc2 named[23773]: initializing GeoIP Country (IPv6) (type 12) DB May 10 13:19:44 vdc2 named[23773]: GEO-106FREE 20160607 Build 1 Copy May 10 13:19:44 vdc2 named[23773]: GeoIP City (IPv4) (type 2) DB not available May 10 13:19:44 vdc2 named[23773]: GeoIP City (IPv4) (type 6) DB not...

....local named[2506]: reading built-in trusted > keys from file '/etc/named.iscdlv.key' > May 11 20:03:41 dc.exza.local named[2506]: initializing GeoIP Country > (IPv4) (type 1) DB > May 11 20:03:41 dc.exza.local named[2506]: GEO-106FREE 20160607 Build > 1 Copyright (c) 2016 MaxMind > May 11 20:03:41 dc.exza.local named[2506]: initializing GeoIP Country > (IPv6) (type 12) DB > May 11 20:03:41 dc.exza.local named[2506]: GEO-106FREE 20160607 Build > 1 Copy > May 11 20:03:41 dc.exza.local named[2506]: GeoIP City (IPv4) (type 2) > DB not available > May 11...

...toso.com named[2807]: reading built-in trusted keys > from file '/etc/named.iscdlv.key' nov 05 03:09:02 data.contoso.com > named[2807]: initializing GeoIP Country (IPv4) (type 1) DB nov 05 > 03:09:02 data.contoso.com named[2807]: GEO-106FREE 20160607 Build 1 > Copyright (c) 2016 MaxMind nov 05 03:09:02 data.contoso.com > named[2807]: initializing GeoIP Country (IPv6) (type 12) DB nov 05 > 03:09:02 data.contoso.com named[2807]: GEO-106FREE 20160607 Build 1 > Copy nov 05 03:09:02 data.contoso.com named[2807]: GeoIP City (IPv4) > (type 2) DB not available nov 05 03:09:02...

I have a customer that has a Trendnet TEW-435BRM router which has the bad habit of rewriting all external connections so the Asterisk server only sees the IP address of the router itself. Up to today this has not been a problem since all extensions are on the local network but now they want to have a couple external IP phones (SIP). I opened up the ports on the router and my phone can register.