This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

So my XG thinks the 47.133.23.* subnet isn't in United States...wtf...

I filter my traffic by country for incoming dnats. I have it set so only United States can get thru to these ports. However I can access my server from any other connection inside my country except my own home. Which has an ip of 47.133.23.* which if you look it up, registers as in USA.

Someone needs to fix this list....

This thread was automatically locked due to age.

Parents

0 rfcat_vk over 7 years ago

Hi,

that is why I gave up using country filtering on the XG, it was blocking AU government services and some US government services as being in China.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 7 years ago in reply to rfcat_vk

Hi, i am kinda confused.

All database i checked, the /24 Sub 47.133.23.0 seems to be placed in Canada, not US?

http://www.geoip.co.uk/

https://geoiptool.com/de/?ip=47.133.23.100

The XG is basically lookup a geoip database.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 7 years ago in reply to LuCar Toni

Hi MBP,

I checked whois ip when the sites failed and it showed them as being in AU and US, but the XG was blocking them as China.

Ian

The were government run ntp sites.
Cancel
Vote Up 0 Vote Down

Cancel
0 Greg Rogers over 7 years ago in reply to LuCar Toni

This shows it's in USA
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 7 years ago in reply to Greg Rogers

So to sum up, we have 3 database and 2 different results.

Which one are correct?

I mean - You see what i try to say. GeoIP databases are most of the time not correct.

And if XG refer to one database.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 7 years ago in reply to Greg Rogers

Interesting because this whois ip shows it to be in Canada.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Greg Rogers over 7 years ago in reply to rfcat_vk

At least they can get the ISP right bahaha.

But no really, this sucks. Someone should come up with a fix. Maybe check a few sources at the same time and do a vote count before accepting? Although I can only imagine that would slow things down a bit. Maybe go with a provider that has better results? Or maybe let the owner of the XG choose which provider out of a list, to use?
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Greg Rogers over 7 years ago in reply to rfcat_vk

At least they can get the ISP right bahaha.

But no really, this sucks. Someone should come up with a fix. Maybe check a few sources at the same time and do a vote count before accepting? Although I can only imagine that would slow things down a bit. Maybe go with a provider that has better results? Or maybe let the owner of the XG choose which provider out of a list, to use?
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 LuCar Toni over 7 years ago in reply to Greg Rogers

There are couple of scenarios, which you can do.

But you need to know, you have to pay to use most of these databases.

https://stackoverflow.com/questions/19514749/best-ip-to-country-database

In my point of view, geo ip seems not to be "good" in times of Proxy solutions and the current Boom of cloud providers (AWS, azure etc.), because nobody can say, which "country" they are coming from. If i buy a ec2 instance in US and go through a VPN to this instance, am i a US company? Don´t think so. Just my 2 cents.
Cancel
Vote Up 0 Vote Down

Cancel