From mboxrd@z Thu Jan 1 00:00:00 1970 From: IT Superhack To: development@lists.ipfire.org Subject: Re: [PATCH] Add GeoIP location to nameservers Date: Sun, 10 Jan 2016 17:25:10 +0100 Message-ID: <569285E6.6060601@web.de> In-Reply-To: <1451926780.31655.263.camel@ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============4802978469573069447==" List-Id: --===============4802978469573069447== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Hello Michael, hello Matthias, Michael Tremer: > Just out of curiosity, why do you find this information so helpful? As Matthias said already, is is more a "nice to have" than something which is seriously needed. I wrote this patch because a friend of mine in France discovered that his ISP assigns DNS servers from Australia and Great Britain, which was slowing down DNS resolving a lot. Therefore I thougt it might be useful to see in which countries your DNS servers are located, just in case you didn't set some by your own. In general, adding geographic information to IP addresses is very helpful in my point of view because anomalies can be detected much better and more precise firewall rules are possible. However, some thing might still be improved: For example, the ipinfo.cgi file shows the IP address, the rDNS name, whois information, but not the appropriate flag. So, if someone scrolls through the connection tracking page, he/she/it sees the source and destination IPs of any active (and recently closed) connection. At the moment, there is no way of telling which country an IP belongs to - without using additional web services, of course - since the flag is shown neither at the connection tracking page nor at the ipinfo.cgi page. This isn't very helpful, is it? That is basically the motivation behind the two patches I submitted recently. Best regards, Timmothy Wilson --===============4802978469573069447== Content-Type: application/pgp-signature Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="signature.asc" MIME-Version: 1.0 LS0tLS1CRUdJTiBQR1AgU0lHTkFUVVJFLS0tLS0KCmlRRWNCQUVCQ2dBR0JRSldrb1h1QUFvSkVP eUxhMUM1RWF6cjQyWUgvUjRidTBDb3lqeFVzSmozMXZWd3N0cHkKZUFmWWVSK0s4dEhHZkFaV2pr NElZdlpadmFLcGc0SWRPZEZ0QURhSUhpalcxV0Rma1VsMWVQZlF6RUZkakhQcgpIMmJoQjcxQ0RU ZHk0TGlHcUgxMGJwUG1MV1kvL2QvRnJwZ01EeDVya2lOUUc3c3J3TkFPSmZnUmFWb3Z1Mlc3ClUz MnYraVkvWVltTFpBZlpDMXgwR0VRdEZGL2pRcTIxbXQxL2U1REdoRGF4d2E4bFFWVEtZcnUrUTdv N0JBQnoKN2xRTXl4c2U1WlRuV3ZjQll5OGNMOTZRK0pKdnVkZllqZXBwY3JLV2t0REl2dUY2dHdH ZHErTXJ0Uy9lSzh0QQpNcUhxYnJjck1US1QrOUNYMGlOaWFDVXlTc1pzdmZyQ0lmRkRHV1BhR0Z3 Nzd2SjRsVFNQOHc4TGNLNnVzREk9Cj1zQ0hSCi0tLS0tRU5EIFBHUCBTSUdOQVRVUkUtLS0tLQo= --===============4802978469573069447==--