Hi, Yes, I can confirm this. The subnets returned are not unique. -Michael > On 22 Nov 2020, at 11:59, Peter Müller wrote: > > Hello *, > > I just stumbled across a strange issue on my testing machine strongly reminding me of a problem with the xt_geoip module if we printed the location database contents non-planar: > > For debugging and monitoring reasons, a NRPE job pinging ping.ipfire.org (which resolves to 81.3.27.38) is executed periodically. Since a few hours, this job fails due to ICMP packets to this IP address being dropped by the outgoing firewall engine. > > Its policy is set to "drop", with a rule allowing ICMP traffic to DE. While "location lookup 81.3.27.38" correctly returns DE for the prefix 31.8.0.0/18, it seems as the xt_geoip module did not get that and misclassifies this IP address. > > Is somebody able to verify or falsify this issue on Core Development Build 153? > > Thanks, and best regards, > Peter Müller