Location August 2020

location@lists.ipfire.org

4 participants
8 discussions

[PATCH 1/3] perl: Add lookup_network_has_flag() function.
by Stefan Schantl 31 Aug '20

31 Aug '20

This function can be used to check if a given address or network has one of the following network flags. * LOC_NETWORK_FLAG_ANONYMOUS_PROXY * LOC_NETWORK_FLAG_SATELLITE_PROVIDER * LOC_NETWORK_FLAG_ANYCAST It will return true if the given flag is set. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- src/perl/Location.xs | 36 ++++++++++++++++++++++++++++++++++++ 1 file changed, 36 insertions(+) diff --git a/src/perl/Location.xs b/src/perl/Location.xs index 7afa3e7..1cb2e21 100644 --- a/src/perl/Location.xs +++ b/src/perl/Location.xs @@ -181,6 +181,42 @@ lookup_country_code(db, address) OUTPUT: RETVAL +bool +lookup_network_has_flag(db, address, flag) + struct loc_database* db; + char* address; + char* flag; + + CODE: + RETVAL = false; + + enum loc_network_flags iv = 0; + + if (strcmp("LOC_NETWORK_FLAG_ANONYMOUS_PROXY", flag) == 0) + iv |= LOC_NETWORK_FLAG_ANONYMOUS_PROXY; + else if (strcmp("LOC_NETWORK_FLAG_SATELLITE_PROVIDER", flag) == 0) + iv |= LOC_NETWORK_FLAG_SATELLITE_PROVIDER; + else if (strcmp("LOC_NETWORK_FLAG_ANYCAST", flag) == 0) + iv |= LOC_NETWORK_FLAG_ANYCAST; + else + croak("Invalid flag"); + + // Lookup network + struct loc_network *network; + int err = loc_database_lookup_from_string(db, address, &network); + + if (!err) { + // Check if the network has the given flag. + if (loc_network_has_flag(network, iv)) { + RETVAL = true; + } + + loc_network_unref(network); + } + + OUTPUT: + RETVAL + SV* lookup_asn(db, address) struct loc_database* db; -- 2.20.1

2 3

[PATCH 1/3] override-other.txt: clarify intention of this file
by Peter Müller 30 Aug '20

30 Aug '20

Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- overrides/override-other.txt | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/overrides/override-other.txt b/overrides/override-other.txt index d965bfb..8504933 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -2,13 +2,13 @@ # override-other [.txt] # # This file contains Autonomous Systems (AS) or IP networks/addresses -# whose country information in the WHOIS is not identical to their -# physical location and which do not match to one of the special categories +# whose country information in corresponding RIR data is believed or proven +# to be invalid or inaccurate and which do not match to one of the special categories # A[1-3]. # -# Such networks might be legitimate (poorly maintained WHOIS data) -# or hostile (faked WHOIS data in order to bypass country filtering or -# to hide the owners' identity). +# Such networks might be legitimate (poorly maintained WHOIS data), shady +# (networks owned by letterbox companies in offshore jurisdictions) or +# hostile (faked RIR data in order to bypass location-based filtering). # # Please keep this file sorted. # -- 2.26.2

1 2

Countries nomenclature database
by Pierre Equoy 24 Aug '20

24 Aug '20

Hello, I recently discovered the IPFire Location project[1] and I like that there is an open alternative to Maxmind GeoIP database. I live in Taiwan, and when I connected on the website[1], I was greeted with: "You are visiting from Taiwan, Province of China" I am indeed visiting from Taiwan, but Taiwan is not a province of China. I had a look at the source code[2] but couldn't find the database you are using in order to provide a patch. Is it possible to modify the wording? Thanks, [1] https://location.ipfire.org/ [2] https://git.ipfire.org/?p=location/libloc.git;a=summary -- Pierre Sent with ProtonMail Secure Email.

2 3

[PATCH] perl: Add get_as_name()
by Stefan Schantl 22 Aug '20

22 Aug '20

This function can be use to give the numer of an Autonomous System and get back the stored name from the used location database. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- src/perl/Location.xs | 23 +++++++++++++++++++++++ src/perl/t/Location.t | 7 +++++-- 2 files changed, 28 insertions(+), 2 deletions(-) diff --git a/src/perl/Location.xs b/src/perl/Location.xs index 3c347db..7afa3e7 100644 --- a/src/perl/Location.xs +++ b/src/perl/Location.xs @@ -229,6 +229,29 @@ get_continent_code(db, ccode) OUTPUT: RETVAL +SV* +get_as_name(db, as_number) + struct loc_database* db; + unsigned int as_number; + + CODE: + RETVAL = &PL_sv_undef; + + // Lookup AS. + struct loc_as *as; + int err = loc_database_get_as(db, &as, as_number); + if(!err) { + // Get the name of the given AS number. + const char* as_name = loc_as_get_name(as); + + RETVAL = newSVpv(as_name, strlen(as_name)); + + loc_as_unref(as); + } + + OUTPUT: + RETVAL + void DESTROY(db) struct loc_database* db; diff --git a/src/perl/t/Location.t b/src/perl/t/Location.t index ec7f1e0..0d9a1a5 100644 --- a/src/perl/t/Location.t +++ b/src/perl/t/Location.t @@ -12,7 +12,7 @@ use warnings; my $testdb = $ENV{'database'}; my $keyfile = $ENV{'keyfile'}; -use Test::More tests => 8; +use Test::More tests => 9; BEGIN { use_ok('Location') }; ######################### @@ -57,5 +57,8 @@ if(defined($as_number)) { fail("Test 8 - Lookup Autonomous System Number for add $as_number = &Location::lookup_asn($db, "a.b.c.d"); if(defined($as_number)) { fail("Test 9 - Lookup Autonomous System Number for invalid address.") } +my $as_name = &Location::get_as_name($db, "204867"); +ok($as_name eq "Lightning Wire Labs GmbH", "Test 10 - Get name for AS204867."); + my @locations = &Location::database_countries($db); -ok(@locations != 0, "Test 10 - Get database countries."); +ok(@locations != 0, "Test 11 - Get database countries."); -- 2.20.1

1 0

[PATCH 1/3] perl: Add database_countries() function.
by Stefan Schantl 21 Aug '20

21 Aug '20

This function is used to the stored countries of a database, which easily can be assigned to an array. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- src/perl/Location.xs | 42 ++++++++++++++++++++++++++++++++++++++++-- 1 file changed, 40 insertions(+), 2 deletions(-) diff --git a/src/perl/Location.xs b/src/perl/Location.xs index 5693744..3c347db 100644 --- a/src/perl/Location.xs +++ b/src/perl/Location.xs @@ -6,11 +6,10 @@ #include <stdio.h> #include <string.h> - #include <loc/libloc.h> #include <loc/database.h> #include <loc/network.h> - +#include <loc/country.h> MODULE = Location PACKAGE = Location @@ -119,6 +118,45 @@ get_license(db) OUTPUT: RETVAL +void +database_countries(db) + struct loc_database* db; + + PPCODE: + // Create Database enumerator + struct loc_database_enumerator* enumerator; + int err = loc_database_enumerator_new(&enumerator, db, LOC_DB_ENUMERATE_COUNTRIES); + + if (err) { + croak("Could not create a database enumerator\n"); + } + + // Init and enumerate first country. + struct loc_country* country; + err = loc_database_enumerator_next_country(enumerator, &country); + if (err) { + croak("Could not enumerate next country\n"); + } + + while (country) { + // Extract the country code. + const char* ccode = loc_country_get_code(country); + + // Push country code. + XPUSHs(sv_2mortal(newSVpv(ccode, 2))); + + // Unref country pointer. + loc_country_unref(country); + + // Enumerate next item. + err = loc_database_enumerator_next_country(enumerator, &country); + if (err) { + croak("Could not enumerate next country\n"); + } + } + + loc_database_enumerator_unref(enumerator); + # # Lookup functions # -- 2.20.1

2 3

[PATCH 1/3] A1 overrides: add 45.154.138.0/24
by Peter Müller 17 Aug '20

17 Aug '20

Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- overrides/override-a1.txt | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt index 582cd55..858e86d 100644 --- a/overrides/override-a1.txt +++ b/overrides/override-a1.txt @@ -359,6 +359,11 @@ descr: VPN Consumer Network remarks: VPN provider is-anonymous-proxy: yes +net: 45.154.138.0/24 +descr: Express VPN International Ltd +remarks: VPN provider +is-anonymous-proxy: yes + net: 45.220.72.0/22 descr: Low budget VPN service remarks: VPN provider -- 2.26.2

1 2

Core Update 148 (testing) report
by Peter Müller 09 Aug '20

09 Aug '20

Hello *, Core Update 148 (testing, see: https://blog.ipfire.org/post/ipfire-2-25-core-update-148-is-available-for-t…) is running here for about a week without any major issues so far. Sorry for being late this time. Looking at the ipinfo.cgi, it currently displays the country returned by the location database, which should always be a valid one, as we decided not no override them for "special" IP addresses such as anonymous proxies, satellite providers, or anycast networks. However, we do not display this information to the user. While I have no idea about how to do that for CGIs such as the DNS settings, or the connection tracking table, the ipinfo.cgi should contain such information from my point of view. (I suspect this raising questions in the community as well.) It would be nice to have AS information displayed on ipinfo.cgi as well, but since we do not process them elsewhere, this is definitively not a show-stopper. Thanks to Michael for being the "master of disaster" behind libloc (no offense intended ;-) ) and providing me with answers to it and testing environment. Thanks to Stefan for building the Perl bindings and adjusting CGIs and firewall scripts. Thanks, and best regards, Peter Müller

2 1

[PATCH] location: Provide a return code if the database does not need to be updated.
by Stefan Schantl 04 Aug '20

04 Aug '20

Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- src/python/location.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/python/location.in b/src/python/location.in index 5211b28..8cdd140 100644 --- a/src/python/location.in +++ b/src/python/location.in @@ -416,7 +416,7 @@ class CLI(object): _("The datase has recently be updated recently (%s)") % \ format_timedelta(now - t), ) - return + return 3 # Fetch the timestamp we need from DNS t = location.discover_latest_version() -- 2.20.1

2 1

2024

2023

2022

2021

2020

2019

2018

2017

Location August 2020