Re: [PATCH] Add GeoIP location to nameservers

[IT Superhack <itsuperhack@web.de>]

[-- Attachment #1: Type: text/plain, Size: 1401 bytes --]

Hello Michael, hello Matthias,

Michael Tremer:
> Just out of curiosity, why do you find this information so helpful?

As Matthias said already, is is more a "nice to have" than something
which is seriously needed.

I wrote this patch because a friend of mine in France discovered that
his ISP assigns DNS servers from Australia and Great Britain, which
was slowing down DNS resolving a lot.

Therefore I thougt it might be useful to see in which countries your
DNS servers are located, just in case you didn't set some by your own.

In general, adding geographic information to IP addresses is very
helpful in my point of view because anomalies can be detected much
better and more precise firewall rules are possible.

However, some thing might still be improved: For example, the ipinfo.cgi
file shows the IP address, the rDNS name, whois information, but not
the appropriate flag. So, if someone scrolls through the connection tracking
page, he/she/it sees the source and destination IPs of any active (and
recently closed) connection. At the moment, there is no way of telling
which country an IP belongs to - without using additional web services, of
course - since the flag is shown neither at the connection tracking page
nor at the ipinfo.cgi page. This isn't very helpful, is it?

That is basically the motivation behind the two patches I submitted
recently.

Best regards,
Timmothy Wilson


[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 455 bytes --]