May 2020 - Location - lists.ipfire.org

[PATCH] debian: Enable location-download.timer after installation
by Stefan Schantl 21 May '20

21 May '20

This timer periodly executes the location-downloader and keeps the location database up to date. Fixes #12412. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- debian/rules | 3 +++ 1 file changed, 3 insertions(+) diff --git a/debian/rules b/debian/rules index 55d4334..1c6d171 100755 --- a/debian/rules +++ b/debian/rules @@ -11,3 +11,6 @@ export DEB_BUILD_MAINT_OPTIONS=hardening=+all override_dh_perl: dh_perl -d + +override_dh_systemd_enable: + dh_systemd_enable location-downloader.timer -- 2.26.1

1 0

[PATCH] debian: Ship database signing key.
by Stefan Schantl 21 May '20

21 May '20

This key is needed to download and verify the database. Fixes #12410. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- debian/libloc.install | 1 + 1 file changed, 1 insertion(+) diff --git a/debian/libloc.install b/debian/libloc.install index 30ce9d8..eb3b49a 100644 --- a/debian/libloc.install +++ b/debian/libloc.install @@ -6,3 +6,4 @@ usr/lib/python3*/dist-packages usr/lib/python3*/lib-dynload/*.so src/systemd/*.service /lib/systemd/system/ src/systemd/*.timer /lib/systemd/system/ +var/lib/location/signing-key.pem -- 2.26.1

1 0

[PATCH] examples/create-database.py: Add hack to allow loading the module in build environment.
by Stefan Schantl 21 May '20

21 May '20

This script is needed to generate the database which is used by the testsuite of the perl binding of libloc. This allows us to revert the following commits: * 482eb94f165507ffcb6503e162535064d6dcecac * 3d26288681601b273f034de1f2241dc4342791b5 Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- examples/python/create-database.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/examples/python/create-database.py b/examples/python/create-database.py index 86205e0..0eaa945 100644 --- a/examples/python/create-database.py +++ b/examples/python/create-database.py @@ -1,6 +1,6 @@ #!/usr/bin/python3 -import location +import _location as location import os import sys -- 2.26.1

1 0

[PATCH v2 1/2] override-other.txt: drop non-routable IP networks
by Peter Müller 15 May '20

15 May '20

These are now handled by the location-importer, so we do not need to maintain an additional list here. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- overrides/override-other.txt | 55 +----------------------------------- 1 file changed, 1 insertion(+), 54 deletions(-) diff --git a/overrides/override-other.txt b/overrides/override-other.txt index 9269f28..b970443 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -10,62 +10,9 @@ # or hostile (faked WHOIS data in order to bypass country filtering or # to hide the owners' identity). # -# Further, some networks (such as RFC1918 addresses) must not be -# added to the database since it does not make sense to do so. +# Please keep this file sorted. # -# never add private address blocks (RFC1918) -net: 10.0.0.0/8 -descr: RFC1918 private address block -remarks: must not be added to the database -country: - -net: 172.16.0.0/12 -descr: RFC1918 private address block -remarks: must not be added to the database -country: - -net: 192.168.0.0/16 -descr: RFC1918 private address block -remarks: must not be added to the database -country: - -# never add other special address blocks -net: 0.0.0.0/8 -descr: RFC3232 current network alias -remarks: must not be added to the database -country: - -net: 100.64.0.0/10 -descr: RFC6598 provider CNAT network -remarks: must not be added to the database -country: - -net: 127.0.0.0/8 -descr: RFC3330 localnet -remarks: must not be added to the database -country: - -net: 169.254.0.0/16 -descr: RFC5735 link-local address block -remarks: must not be added to the database -country: - -net: 224.0.0.0/4 -descr: RFC3171 multicast network -remarks: must not be added to the database -country: - -net: ::/128 -descr: IPv6 address which must not assigned anywhere -remarks: must not be added to the database -country: - -net: ::1/128 -descr: IPv6 localhost address -remarks: must not be added to the database -country: - # networks with faked location net: 88.151.117.0/24 descr: Golden Internet LLC -- 2.26.1

1 1

[PATCH] A{1,2} overrides: replace "net" by "asnum" for ASNs
by Peter Müller 15 May '20

15 May '20

Cc: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- country-overrides/override-a1.txt | 36 ++++++++-------- country-overrides/override-a2.txt | 68 +++++++++++++++---------------- 2 files changed, 52 insertions(+), 52 deletions(-) diff --git a/country-overrides/override-a1.txt b/country-overrides/override-a1.txt index 98c7f74..dd07087 100644 --- a/country-overrides/override-a1.txt +++ b/country-overrides/override-a1.txt @@ -18,92 +18,92 @@ # Please keep this file sorted. # -net: AS4224 +asnum: AS4224 descr: The Calyx Institue remarks: Tor relay provider is-anonymous-proxy: yes -net: AS8427 +asnum: AS8427 descr: Maginfo remarks: VPN provider is-anonymous-proxy: yes -net: AS10914 +asnum: AS10914 descr: Cypherpunk Privacy Network remarks: VPN provider is-anonymous-proxy: yes -net: AS23762 +asnum: AS23762 descr: VPNsolutions Pty Ltd remarks: VPN provider is-anonymous-proxy: yes -net: AS37560 +asnum: AS37560 descr: Cyberdyne S.A. remarks: VPN and Tor relay provider is-anonymous-proxy: yes -net: AS38814 +asnum: AS38814 descr: Asiamax Ltd. VPN remarks: VPN provider is-anonymous-proxy: yes -net: AS51852 +asnum: AS51852 descr: Private Layer INC remarks: VPN provider is-anonymous-proxy: yes -net: AS58546 +asnum: AS58546 descr: Astrill VPN remarks: VPN provider is-anonymous-proxy: yes -net: AS60729 +asnum: AS60729 descr: Zwiebelfreunde e.V. remarks: Tor relay provider is-anonymous-proxy: yes -net: AS62744 +asnum: AS62744 descr: Quintex Alliance Consulting remarks: Tor relay provider is-anonymous-proxy: yes -net: AS201665 +asnum: AS201665 descr: Anonymizer, Inc. remarks: VPN provider is-anonymous-proxy: yes -net: AS206106 +asnum: AS206106 descr: Privacy Ukraine LLC remarks: VPN provider is-anonymous-proxy: yes -net: AS208294 +asnum: AS208294 descr: Markus Koch remarks: Tor relay provider is-anonymous-proxy: yes -net: AS208323 +asnum: AS208323 descr: Foundation for Applied Privacy remarks: Tor relay provider is-anonymous-proxy: yes -net: AS208476 +asnum: AS208476 descr: Danilenko, Artyom remarks: (Rogue) VPN provider is-anonymous-proxy: yes -net: AS209623 +asnum: AS209623 descr: David Craig remarks: (Rogue) VPN provider is-anonymous-proxy: yes -net: AS394087 +asnum: AS394087 descr: Secure Internet LLC / PureVPN remarks: VPN provider is-anonymous-proxy: yes -net: AS396507 +asnum: AS396507 descr: Emerald Onion remarks: Tor relay provider is-anonymous-proxy: yes diff --git a/country-overrides/override-a2.txt b/country-overrides/override-a2.txt index e6cdda1..309afcd 100644 --- a/country-overrides/override-a2.txt +++ b/country-overrides/override-a2.txt @@ -12,172 +12,172 @@ # Please keep this file sorted. # -net: AS4913 +asnum: AS4913 descr: Speedcast Communications, Inc. remarks: Satellite Internet provider is-satellite-provider: yes -net: AS5666 +asnum: AS5666 descr: Speedcast Communications, Inc. remarks: Satellite Internet provider is-satellite-provider: yes -net: AS9229 +asnum: AS9229 descr: Speedcast Limited remarks: Satellite Internet provider is-satellite-provider: yes -net: AS10434 +asnum: AS10434 descr: Satellite Communication Systems, Inc. remarks: Satellite Internet provider is-satellite-provider: yes -net: AS12684 +asnum: AS12684 descr: SES ASTRA S.A. remarks: Satellite Internet provider [several satellite dial-in pools] is-satellite-provider: yes -net: AS15829 +asnum: AS15829 descr: Eutelsat S.A. remarks: Satellite Internet provider is-satellite-provider: yes -net: AS16360 +asnum: AS16360 descr: Signalhorn Trusted Networks GmbH / Satlynx remarks: Satellite Internet provider is-satellite-provider: yes -net: AS19036 +asnum: AS19036 descr: Telesat Network Services Inc. remarks: Satellite Internet provider is-satellite-provider: yes -net: AS21310 +asnum: AS21310 descr: Satellite Ltd. remarks: Satellite Internet provider is-satellite-provider: yes -net: AS22184 +asnum: AS22184 descr: IRIDIUM SATELLITE, LLC remarks: Satellite Internet provider is-satellite-provider: yes -net: AS25222 +asnum: AS25222 descr: Inmarsat Solutions B.V. remarks: Satellite Internet provider is-satellite-provider: yes -net: AS29137 +asnum: AS29137 descr: Eutelsat S.A. remarks: Satellite Internet provider is-satellite-provider: yes -net: AS29286 +asnum: AS29286 descr: SKYLOGIC S.P.A. remarks: Satellite Internet provider [several satellite dial-in pools] is-satellite-provider: yes -net: AS31515 +asnum: AS31515 descr: INMARSAT GLOBAL LIMITED remarks: Satellite Internet provider is-satellite-provider: yes -net: AS31753 +asnum: AS31753 descr: Inmarsat Government remarks: Satellite Internet provider is-satellite-provider: yes -net: AS37296 +asnum: AS37296 descr: Afcom Satellite Networks Nigeria Limited remarks: Satellite Internet provider is-satellite-provider: yes -net: AS38172 +asnum: AS38172 descr: IPSTAR Australia Pty. Ltd. remarks: Satellite Internet provider is-satellite-provider: yes -net: AS39356 +asnum: AS39356 descr: Avanti Broadband Ltd remarks: Satellite Internet provider [several satellite dial-in pools] is-satellite-provider: yes -net: AS34444 +asnum: AS34444 descr: Eutelsat S.A. remarks: Satellite Internet provider is-satellite-provider: yes -net: AS39151 +asnum: AS39151 descr: AXESS Networks Solutions Germany GmbH / CeTEL GmbH / GeoLink remarks: Satellite Internet provider is-satellite-provider: yes -net: AS41659 +asnum: AS41659 descr: Arab Satellite Communications Organization remarks: Satellite Internet provider is-satellite-provider: yes -net: AS43905 +asnum: AS43905 descr: Telenor Satellite AS remarks: Satellite Internet provider is-satellite-provider: yes -net: AS45232 +asnum: AS45232 descr: Spacenet Internet Services Pvt. Ltd. remarks: Satellite Internet provider is-satellite-provider: yes -net: AS45603 +asnum: AS45603 descr: Orion Satellite Systems remarks: Satellite Internet provider is-satellite-provider: yes -net: AS47339 +asnum: AS47339 descr: Speedcast Europe B.V. remarks: Satellite Internet provider is-satellite-provider: yes -net: AS47965 +asnum: AS47965 descr: Signalhorn Trusted Networks GmbH remarks: Satellite Internet provider [high confidence, but not proofed] is-satellite-provider: yes -net: AS56262 +asnum: AS56262 descr: Dagupan Urban Satellite Vision Inc. remarks: Satellite Internet provider is-satellite-provider: yes -net: AS56804 +asnum: AS56804 descr: Gilat Satellite Networks Ltd. remarks: Satellite Internet provider is-satellite-provider: yes -net: AS58265 +asnum: AS58265 descr: Level421 GmbH remarks: Satellite Internet provider is-satellite-provider: yes -net: AS57490 +asnum: AS57490 descr: Satellite Telecom LTD. remarks: Satellite Internet provider is-satellite-provider: yes -net: AS62023 +asnum: AS62023 descr: NYNEX satellite OHG remarks: Satellite Internet provider is-satellite-provider: yes -net: AS135324 +asnum: AS135324 descr: IPStar remarks: Satellite Internet provider [high confidence, but not proofed] is-satellite-provider: yes -net: AS393582 +asnum: AS393582 descr: VIDEO DIRECT SATELLITE & ENTERTAINMENT / WisperISP remarks: Satellite Internet provider is-satellite-provider: yes -net: AS393944 +asnum: AS393944 descr: Inmarsat Solutions US Inc remarks: Satellite Internet provider is-satellite-provider: yes -- 2.26.1

2 3

[PATCH 1/2] override-other.txt: drop non-routable IP networks
by Peter Müller 13 May '20

13 May '20

These are now handled by the location-importer, so we do not need to maintain an additional list here. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- country-overrides/override-other.txt | 55 +--------------------------- 1 file changed, 1 insertion(+), 54 deletions(-) diff --git a/country-overrides/override-other.txt b/country-overrides/override-other.txt index 9269f28..b970443 100644 --- a/country-overrides/override-other.txt +++ b/country-overrides/override-other.txt @@ -10,62 +10,9 @@ # or hostile (faked WHOIS data in order to bypass country filtering or # to hide the owners' identity). # -# Further, some networks (such as RFC1918 addresses) must not be -# added to the database since it does not make sense to do so. +# Please keep this file sorted. # -# never add private address blocks (RFC1918) -net: 10.0.0.0/8 -descr: RFC1918 private address block -remarks: must not be added to the database -country: - -net: 172.16.0.0/12 -descr: RFC1918 private address block -remarks: must not be added to the database -country: - -net: 192.168.0.0/16 -descr: RFC1918 private address block -remarks: must not be added to the database -country: - -# never add other special address blocks -net: 0.0.0.0/8 -descr: RFC3232 current network alias -remarks: must not be added to the database -country: - -net: 100.64.0.0/10 -descr: RFC6598 provider CNAT network -remarks: must not be added to the database -country: - -net: 127.0.0.0/8 -descr: RFC3330 localnet -remarks: must not be added to the database -country: - -net: 169.254.0.0/16 -descr: RFC5735 link-local address block -remarks: must not be added to the database -country: - -net: 224.0.0.0/4 -descr: RFC3171 multicast network -remarks: must not be added to the database -country: - -net: ::/128 -descr: IPv6 address which must not assigned anywhere -remarks: must not be added to the database -country: - -net: ::1/128 -descr: IPv6 localhost address -remarks: must not be added to the database -country: - # networks with faked location net: 88.151.117.0/24 descr: Golden Internet LLC -- 2.26.1

1 1

[PATCH 1/4] location-importer: DELETE local loopback address space
by Peter Müller 13 May '20

13 May '20

This should never appear in public BGP data, but since people tend to do really strange things on the interent, it's better to delete 127.0.0.0/8 data, just in case. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- src/python/location-importer.in | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/python/location-importer.in b/src/python/location-importer.in index 08c9ed7..c751332 100644 --- a/src/python/location-importer.in +++ b/src/python/location-importer.in @@ -512,6 +512,9 @@ class CLI(object): -- Delete anything that is not global unicast address space DELETE FROM announcements WHERE family(network) = 6 AND NOT network <<= '2000::/3'; + -- DELETE local loopback address space + DELETE FROM announcements WHERE family(network) = 4 AND network <<= '127.0.0.0/8'; + -- DELETE RFC1918 address space DELETE FROM announcements WHERE family(network) = 4 AND network <<= '10.0.0.0/8'; DELETE FROM announcements WHERE family(network) = 4 AND network <<= '172.16.0.0/12'; -- 2.26.1

1 3

[PATCH] Makefile.am: Specify CC and LD when compiling perl module.
by Stefan Schantl 12 May '20

12 May '20

This fixes the issues when cross compiling libloc and the perl binding. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- Makefile.am | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Makefile.am b/Makefile.am index ee1c36f..6c01e76 100644 --- a/Makefile.am +++ b/Makefile.am @@ -205,7 +205,7 @@ build-perl: cd $(builddir)/src/perl && $(PERL) Makefile.PL PREFIX="$(prefix)" \ INC="-I$(abs_srcdir)/src" LIBS="-L$(abs_builddir)/src/.libs -lloc" - cd $(builddir)/src/perl && $(MAKE) LD_RUN_PATH= + cd $(builddir)/src/perl && $(MAKE) CC="$(CC)" LD="$(LD)" LD_RUN_PATH= .PHONY: check-perl check-perl: testdata.db -- 2.26.1

1 0

[PATCH] Debian: Require lightwight python development packages.
by Stefan Schantl 12 May '20

12 May '20

Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- debian/control | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/debian/control b/debian/control index f224084..09fbae7 100644 --- a/debian/control +++ b/debian/control @@ -9,10 +9,10 @@ Build-Depends: dh-systemd, asciidoc <!nodoc>, intltool (>=0.40.0), - libpython3-all-dev <!nopython>, + libpython3-dev <!nopython>, libssl-dev, libsystemd-dev, - python3-all-dev:any <!nopython>, + python3-dev:any <!nopython>, pkg-config, systemd, xsltproc <!nodoc>, -- 2.26.1

1 0

[PATCH] Debian: Rework package creation.
by Stefan Schantl 12 May '20

12 May '20

Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- Makefile.am | 17 +++++++++++++++-- Readme.debian | 21 +++++++++++++++++++++ dist/debian-build-script.sh | 15 +++++++++++++++ 3 files changed, 51 insertions(+), 2 deletions(-) create mode 100644 Readme.debian create mode 100755 dist/debian-build-script.sh diff --git a/Makefile.am b/Makefile.am index 5922770..ee1c36f 100644 --- a/Makefile.am +++ b/Makefile.am @@ -429,10 +429,23 @@ upload-man: $(MANPAGES_HTML) $(DEBIAN_TARBALL_NAME): dist cp -v $(distdir).tar.xz $@ -.PHONY: debian -debian: $(DEBIAN_TARBALL_NAME) +.PHONY: debian-prepare +debian-prepare: $(DEBIAN_TARBALL_NAME) mkdir -pv debian-build/$(PACKAGE_NAME)-$(PACKAGE_VERSION)/debian cp -avf $(DEBIAN_TARBALL_NAME) debian-build cp -avf debian/* debian-build/$(PACKAGE_NAME)-$(PACKAGE_VERSION)/debian cd debian-build && tar -xvf $(DEBIAN_TARBALL_NAME) + +.PHONY: debian +debian: debian-prepare cd debian-build/$(PACKAGE_NAME)-$(PACKAGE_VERSION) && debuild -us -uc + +.PHONY: debian-all +debian-all: debian-prepare + cd debian-build/$(PACKAGE_NAME)-$(PACKAGE_VERSION) && ../../dist/debian-build-script.sh + +.PHONY: debian-clean-all +debian-clean-all: + if [ -d debian-build ] ; then \ + rm -rvf debian-build ; \ + fi; diff --git a/Readme.debian b/Readme.debian new file mode 100644 index 0000000..1c10928 --- /dev/null +++ b/Readme.debian @@ -0,0 +1,21 @@ +In order to build libloc for debian the following tools are required. + +* In case you want to create packages for the current running machine + "debbuild" is required. + + Type "make debian" to start the build process. + +* If you want to build libloc for several different architectures + "sbuild" is required and needs to be configured. + + Please refer to "https://wiki.debian.org/sbuild" to get more details + how to install and setup this tool. + + It is strongly recomended to use the apt-cache-ng tool, when building + to avoid downloading the required packages several times and to speed-up + the entire build process. + + The details for which distribution and architecture can be adjusted by + editing the "dist/debian-build-script.sh" file. + + Afterwards the build can be launched with "make debian-all". diff --git a/dist/debian-build-script.sh b/dist/debian-build-script.sh new file mode 100755 index 0000000..d8e99bc --- /dev/null +++ b/dist/debian-build-script.sh @@ -0,0 +1,15 @@ + +ARCHITECTURES=( amd64 arm64 i386 armhf riscv64 ) +DISTRIBUTIONS=( buster ) + +# Loop through the array of distributions. +for distribution in "${DISTRIBUTIONS[@]}" +do + : + # Loop through the array of architectures. + for arch in "${ARCHITECTURES[@]}" + do + : + sbuild -d "$distribution" --host=$arch + done +done -- 2.26.1

1 0

2024

2023

2022

2021

2020

2019

2018

2017

Location May 2020