Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 2 Aug 2016 08:02:44 -0700
From:      Michael Sierchio <kudzu@tenebras.com>
To:        Julian Elischer <julian@freebsd.org>, ipfw mailing list <ipfw@freebsd.org>
Subject:   Re: your thoughts on a particualar ipfw action.
Message-ID:  <CAHu1Y72Huw1ypJKY1FA7joCoVYd=vWtix=37t7UEztdwtS_Dhg@mail.gmail.com>
In-Reply-To: <7f573fc4-2820-ebd3-7b15-d8a1cd023372@freebsd.org>
References:  <7f573fc4-2820-ebd3-7b15-d8a1cd023372@freebsd.org>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
On Tue, Aug 2, 2016 at 1:08 AM, Julian Elischer <julian@freebsd.org> wrote:


>
> A recent addition to our armory is the geoip program that, given an
> address can tell you what country it is in and given a country code, can
> give an ipfw table that describes all the ip addresses in that country.
>
>
I look forward to getting acquainted with the new features, but I have an
observation - a database of networks by country is not invariably a
geographic database. If you were to look at IP allocations in the
Caribbean, or other overseas territories of the Netherlands, France, etc.
you'd see what I mean. There's even a bit of FR in North America,
Saint-Pierre & Miquelon.

It works pretty well for excluding North Korea, Afghanistan, Yemen,
Somalia, etc. but can sometimes be confusing.

--=20
"Well," Brahma said, "even after ten thousand explanations, a fool is no
wiser, but an intelligent man requires only two thousand five hundred."

- The Mah=C4=81bh=C4=81rata



Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?CAHu1Y72Huw1ypJKY1FA7joCoVYd=vWtix=37t7UEztdwtS_Dhg>