Date: Tue, 2 Aug 2016 08:02:44 -0700 From: Michael Sierchio <kudzu@tenebras.com> To: Julian Elischer <julian@freebsd.org>, ipfw mailing list <ipfw@freebsd.org> Subject: Re: your thoughts on a particualar ipfw action. Message-ID: <CAHu1Y72Huw1ypJKY1FA7joCoVYd=vWtix=37t7UEztdwtS_Dhg@mail.gmail.com> In-Reply-To: <7f573fc4-2820-ebd3-7b15-d8a1cd023372@freebsd.org> References: <7f573fc4-2820-ebd3-7b15-d8a1cd023372@freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Aug 2, 2016 at 1:08 AM, Julian Elischer <julian@freebsd.org> wrote: > > A recent addition to our armory is the geoip program that, given an > address can tell you what country it is in and given a country code, can > give an ipfw table that describes all the ip addresses in that country. > > I look forward to getting acquainted with the new features, but I have an observation - a database of networks by country is not invariably a geographic database. If you were to look at IP allocations in the Caribbean, or other overseas territories of the Netherlands, France, etc. you'd see what I mean. There's even a bit of FR in North America, Saint-Pierre & Miquelon. It works pretty well for excluding North Korea, Afghanistan, Yemen, Somalia, etc. but can sometimes be confusing. --=20 "Well," Brahma said, "even after ten thousand explanations, a fool is no wiser, but an intelligent man requires only two thousand five hundred." - The Mah=C4=81bh=C4=81rata
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAHu1Y72Huw1ypJKY1FA7joCoVYd=vWtix=37t7UEztdwtS_Dhg>