- Location - lists.ipfire.org

[PATCH 1/2] Add configure option for fanalyzer
by Jonatan Schlag 06 Mar '21

06 Mar '21

Signed-off-by: Jonatan Schlag <jonatan.schlag(a)ipfire.org> --- Makefile.am | 3 +- configure.ac | 15 +++++++ m4/warnings.m4 | 110 +++++++++++++++++++++++++++++++++++++++++++++++++ 3 files changed, 127 insertions(+), 1 deletion(-) create mode 100644 m4/warnings.m4 diff --git a/Makefile.am b/Makefile.am index 65e96d7..0c2f78c 100644 --- a/Makefile.am +++ b/Makefile.am @@ -18,7 +18,8 @@ AM_CPPFLAGS = \ -DSYSCONFDIR=\""$(sysconfdir)"\" \ -I${top_srcdir}/src -AM_CFLAGS = ${my_CFLAGS} \ +AM_CFLAGS = ${warn_CFLAGS} \ + ${my_CFLAGS} \ -ffunction-sections \ -fdata-sections diff --git a/configure.ac b/configure.ac index 9eb9012..dd1ca64 100644 --- a/configure.ac +++ b/configure.ac @@ -89,6 +89,21 @@ AC_CHECK_FUNCS([ \ qsort \ ]) + +# - more-warnings -------------------------------------------------------------- + + +warn_CFLAGS="" + +AC_ARG_ENABLE([more_warnings], + AS_HELP_STRING([--enable-more-warnings], [enable more warn messages especially fanalyzer @<:@default=disabled@:>@]), + [more_warnings=yes], [more_warnings=no]) +AS_IF([test "x$more_warnings" = "xyes"],[ + gl_WARN_ADD([-fanalyzer],[warn_CFLAGS]) +]) + +AC_SUBST([warn_CFLAGS]) + my_CFLAGS="\ -Wall \ -Wchar-subscripts \ diff --git a/m4/warnings.m4 b/m4/warnings.m4 new file mode 100644 index 0000000..9e24d89 --- /dev/null +++ b/m4/warnings.m4 @@ -0,0 +1,110 @@ +# warnings.m4 serial 16 +dnl Copyright (C) 2008-2021 Free Software Foundation, Inc. +dnl This file is free software; the Free Software Foundation +dnl gives unlimited permission to copy and/or distribute it, +dnl with or without modifications, as long as this notice is preserved. + +dnl From Simon Josefsson + +# gl_AS_VAR_APPEND(VAR, VALUE) +# ---------------------------- +# Provide the functionality of AS_VAR_APPEND if Autoconf does not have it. +m4_ifdef([AS_VAR_APPEND], +[m4_copy([AS_VAR_APPEND], [gl_AS_VAR_APPEND])], +[m4_define([gl_AS_VAR_APPEND], +[AS_VAR_SET([$1], [AS_VAR_GET([$1])$2])])]) + + +# gl_COMPILER_OPTION_IF(OPTION, [IF-SUPPORTED], [IF-NOT-SUPPORTED], +# [PROGRAM = AC_LANG_PROGRAM()]) +# ----------------------------------------------------------------- +# Check if the compiler supports OPTION when compiling PROGRAM. +# +# The effects of this macro depend on the current language (_AC_LANG). +AC_DEFUN([gl_COMPILER_OPTION_IF], +[ +AS_VAR_PUSHDEF([gl_Warn], [gl_cv_warn_[]_AC_LANG_ABBREV[]_$1])dnl +AS_VAR_PUSHDEF([gl_Flags], [_AC_LANG_PREFIX[]FLAGS])dnl +AS_LITERAL_IF([$1], + [m4_pushdef([gl_Positive], m4_bpatsubst([$1], [^-Wno-], [-W]))], + [gl_positive="$1" +case $gl_positive in + -Wno-*) gl_positive=-W`expr "X$gl_positive" : 'X-Wno-$.*$'` ;; +esac +m4_pushdef([gl_Positive], [$gl_positive])])dnl +AC_CACHE_CHECK([whether _AC_LANG compiler handles $1], [gl_Warn], [ + gl_save_compiler_FLAGS="$gl_Flags" + gl_AS_VAR_APPEND(m4_defn([gl_Flags]), + [" $gl_unknown_warnings_are_errors ]m4_defn([gl_Positive])["]) + AC_LINK_IFELSE([m4_default([$4], [AC_LANG_PROGRAM([[]])])], + [AS_VAR_SET([gl_Warn], [yes])], + [AS_VAR_SET([gl_Warn], [no])]) + gl_Flags="$gl_save_compiler_FLAGS" +]) +AS_VAR_IF(gl_Warn, [yes], [$2], [$3]) +m4_popdef([gl_Positive])dnl +AS_VAR_POPDEF([gl_Flags])dnl +AS_VAR_POPDEF([gl_Warn])dnl +]) + +# gl_UNKNOWN_WARNINGS_ARE_ERRORS +# ------------------------------ +# Clang doesn't complain about unknown warning options unless one also +# specifies -Wunknown-warning-option -Werror. Detect this. +# +# The effects of this macro depend on the current language (_AC_LANG). +AC_DEFUN([gl_UNKNOWN_WARNINGS_ARE_ERRORS], +[_AC_LANG_DISPATCH([$0], _AC_LANG, $@)]) + +# Specialization for _AC_LANG = C. This macro can be AC_REQUIREd. +AC_DEFUN([gl_UNKNOWN_WARNINGS_ARE_ERRORS(C)], +[ + AC_LANG_PUSH([C]) + gl_UNKNOWN_WARNINGS_ARE_ERRORS_IMPL + AC_LANG_POP([C]) +]) + +# Specialization for _AC_LANG = C++. This macro can be AC_REQUIREd. +AC_DEFUN([gl_UNKNOWN_WARNINGS_ARE_ERRORS(C++)], +[ + AC_LANG_PUSH([C++]) + gl_UNKNOWN_WARNINGS_ARE_ERRORS_IMPL + AC_LANG_POP([C++]) +]) + +# Specialization for _AC_LANG = Objective C. This macro can be AC_REQUIREd. +AC_DEFUN([gl_UNKNOWN_WARNINGS_ARE_ERRORS(Objective C)], +[ + AC_LANG_PUSH([Objective C]) + gl_UNKNOWN_WARNINGS_ARE_ERRORS_IMPL + AC_LANG_POP([Objective C]) +]) + +AC_DEFUN([gl_UNKNOWN_WARNINGS_ARE_ERRORS_IMPL], +[gl_COMPILER_OPTION_IF([-Werror -Wunknown-warning-option], + [gl_unknown_warnings_are_errors='-Wunknown-warning-option -Werror'], + [gl_unknown_warnings_are_errors=])]) + +# gl_WARN_ADD(OPTION, [VARIABLE = WARN_CFLAGS/WARN_CXXFLAGS], +# [PROGRAM = AC_LANG_PROGRAM()]) +# ----------------------------------------------------------- +# Adds parameter to WARN_CFLAGS/WARN_CXXFLAGS if the compiler supports it +# when compiling PROGRAM. For example, gl_WARN_ADD([-Wparentheses]). +# +# If VARIABLE is a variable name, AC_SUBST it. +# +# The effects of this macro depend on the current language (_AC_LANG). +AC_DEFUN([gl_WARN_ADD], +[AC_REQUIRE([gl_UNKNOWN_WARNINGS_ARE_ERRORS(]_AC_LANG[)]) +gl_COMPILER_OPTION_IF([$1], + [gl_AS_VAR_APPEND(m4_if([$2], [], [[WARN_]_AC_LANG_PREFIX[FLAGS]], [[$2]]), [" $1"])], + [], + [$3]) +m4_ifval([$2], + [AS_LITERAL_IF([$2], [AC_SUBST([$2])])], + [AC_SUBST([WARN_]_AC_LANG_PREFIX[FLAGS])])dnl +]) + +# Local Variables: +# mode: autoconf +# End: -- 2.30.1

1 2

[PATCH] overrides: regular batch of various overrides
by Peter Müller 05 Mar '21

05 Mar '21

Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- overrides/override-a1.txt | 10 ++++++++++ overrides/override-a2.txt | 15 +++++++++++++++ overrides/override-a3.txt | 5 +++++ overrides/override-other.txt | 25 +++++++++++++++++++++++++ 4 files changed, 55 insertions(+) diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt index a7594bf..1ccfa0a 100644 --- a/overrides/override-a1.txt +++ b/overrides/override-a1.txt @@ -1249,6 +1249,11 @@ descr: Anonymouse / Anonymous S.A. remarks: VPN and open proxy provider is-anonymous-proxy: yes +net: 193.218.190.0/24 +descr: Private Internet Hosting LTD +remarks: VPN provider +is-anonymous-proxy: yes + net: 194.5.96.0/22 descr: Angelo Kreikamp trading as Forhosting / Privacy Online / Danilenko, Artyom / ... remarks: (Rogue) VPN provider @@ -1264,6 +1269,11 @@ descr: NordVPN remarks: VPN provider is-anonymous-proxy: yes +net: 194.87.207.0/24 +descr: Lynx Proxies Ltd. +remarks: VPN provider +is-anonymous-proxy: yes + net: 195.138.249.0/24 descr: Perfect Privacy LTD remarks: VPN provider diff --git a/overrides/override-a2.txt b/overrides/override-a2.txt index b92f408..72d1a1d 100644 --- a/overrides/override-a2.txt +++ b/overrides/override-a2.txt @@ -1508,6 +1508,11 @@ descr: Digitaria International remarks: Satellite Internet provider is-satellite-provider: yes +net: 185.97.148.0/22 +descr: Skylink Networking Ltd +remarks: Satellite Internet provider [high confidence, but not proofed] +is-satellite-provider: yes + net: 185.151.232.0/22 descr: Inmarsat Solutions AS remarks: Satellite Internet provider @@ -1573,6 +1578,11 @@ descr: Arab Satellite Communications Organization remarks: Satellite Internet provider is-satellite-provider: yes +net: 185.237.132.0/22 +descr: Media Broadcast Satellite GmbH +remarks: Satellite Internet provider +is-satellite-provider: yes + net: 186.1.128.0/19 descr: HUGHES DE COLOMBIA S.A.S. remarks: Satellite Internet provider @@ -1993,6 +2003,11 @@ descr: Avanti Broadband Ltd. remarks: Satellite Internet provider is-satellite-provider: yes +net: 2a00:6cc0::/32 +descr: Skylink Networking Ltd +remarks: Satellite Internet provider [high confidence, but not proofed] +is-satellite-provider: yes + net: 2a00:b3a0::/36 descr: PoP0 Address Space / NYNEX satellite OHG remarks: Satellite Internet provider diff --git a/overrides/override-a3.txt b/overrides/override-a3.txt index 136b678..dbf5dd7 100644 --- a/overrides/override-a3.txt +++ b/overrides/override-a3.txt @@ -735,6 +735,11 @@ descr: ProstoDNS remarks: Generic anycast network is-anycast: yes +net: 169.239.202.0/24 +descr: FuslVZ OpenNIC +remarks: Public anycast DNS resolver +is-anycast: yes + net: 170.52.0.0/21 descr: subspace remarks: Generic anycast network [high confidence, but not proofed] diff --git a/overrides/override-other.txt b/overrides/override-other.txt index b34f055..bec4d80 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -13,6 +13,11 @@ # Please keep this file sorted. # +aut-num: AS3216 +descr: PJSC "Vimpelcom" +remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage +country: RU + aut-num: AS6134 descr: XNNET LLC remarks: traces back to an unknown oversea location (HK?), seems to tamper with RIR data @@ -138,6 +143,11 @@ descr: Selectel remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage country: RU +aut-num: AS49921 +descr: F.I.H. FORMULA INVESTMENT HOUSE CLEARING LIMITED +remarks: claims GR for announced prefixes, but traceroutes dead-end somewhere else in EU +country: EU + aut-num: AS51558 descr: Smart Telecom S.A.R.L remarks: tampers with RIR data, traces back to RU @@ -183,6 +193,11 @@ descr: VpsQuan L.L.C. remarks: claims to be located in US, but traces to HK country: HK +aut-num: AS64437 +descr: NForce Entertainment BV +remarks: currently hijacks a single stolen /20 AfriNIC IPv4 net, hosted in NL +country: NL + aut-num: AS134548 descr: DXTL Tseung Kwan O Service remarks: tampers with RIR data, traces back to AP region @@ -248,6 +263,11 @@ descr: Cooperative Investments LLC remarks: bulletproof ISP and IP hijacker, related to AS202425 and AS62355, traces to NL country: NL +aut-num: AS204136 +descr: Kevin Holly trading as Silent Ghost e.U. +remarks: AS run by someone who thinks allocating IP networks to AQ is funny (it is not, kid) :-/ +country: NL + aut-num: AS204655 descr: Novogara Ltd. remarks: bulletproof ISP (strongly linked to AS202425) located in NL @@ -522,3 +542,8 @@ net: 2a06:e80::/29 descr: Datashield, Inc. remarks: fake offshore location (SC), traces back to NL country: NL + +net: 2a0f:7a80::/29 +descr: ASLINE Limited +remarks: APNIC chunk owned by a HK-based company, but assigned to DE +country: AP -- 2.26.2

1 0

[PATCH] Makefile.am: Honor DESTDIR when installing perl bindings
by Stefan Schantl 27 Feb '21

27 Feb '21

Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- Makefile.am | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Makefile.am b/Makefile.am index 4b865f1..65e96d7 100644 --- a/Makefile.am +++ b/Makefile.am @@ -239,7 +239,7 @@ check-perl: testdata.db .PHONY: install-perl install-perl: - cd $(builddir)/src/perl && $(MAKE) install + cd $(builddir)/src/perl && $(MAKE) install DESTIDR=$(DESTDIR) .PHONY: clean-perl clean-perl: -- 2.20.1

1 0

[PATCH] Makefile.am: Do not specify CC and LD when building perl module.
by Stefan Schantl 23 Feb '21

23 Feb '21

Specifing the CC and LD flags is not required because perl MakeMaker takes care of this. Fixes #12574. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- Makefile.am | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Makefile.am b/Makefile.am index 52a4722..8da1f1b 100644 --- a/Makefile.am +++ b/Makefile.am @@ -230,7 +230,7 @@ build-perl: cd $(builddir)/src/perl && $(PERL) Makefile.PL INSTALLDIRS=vendor \ INC="-I$(abs_srcdir)/src" LIBS="-L$(abs_builddir)/src/.libs -lloc" - cd $(builddir)/src/perl && $(MAKE) CC="$(CC)" LD="$(LD)" LD_RUN_PATH= + cd $(builddir)/src/perl && $(MAKE) LD_RUN_PATH="" .PHONY: check-perl check-perl: testdata.db -- 2.20.1

1 0

[PATCH] Makefile.am: Do not provide PREFIX value for perl build.
by Stefan Schantl 22 Feb '21

22 Feb '21

This caused to gain the following error when building: Only one of PREFIX or INSTALL_BASE can be given. Not both. Using INSTALLDIRS=vendor is the common way to get the modules installed into the right directories. Fixes #12573. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- Makefile.am | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Makefile.am b/Makefile.am index dc594f8..52a4722 100644 --- a/Makefile.am +++ b/Makefile.am @@ -228,7 +228,7 @@ build-perl: @test -e $(builddir)/src/perl/t/Location.t || ln -s --relative $(srcdir)/src/perl/t/Location.t $(builddir)/src/perl/t/ @test -e $(builddir)/src/perl/typemap || ln -s --relative $(srcdir)/src/perl/typemap $(builddir)/src/perl/ - cd $(builddir)/src/perl && $(PERL) Makefile.PL PREFIX="$(prefix)" \ + cd $(builddir)/src/perl && $(PERL) Makefile.PL INSTALLDIRS=vendor \ INC="-I$(abs_srcdir)/src" LIBS="-L$(abs_builddir)/src/.libs -lloc" cd $(builddir)/src/perl && $(MAKE) CC="$(CC)" LD="$(LD)" LD_RUN_PATH= -- 2.20.1

1 0

[PATCH] override-{a1,other}: weekly batch of overrides
by Peter Müller 09 Feb '21

09 Feb '21

Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- overrides/override-a1.txt | 26 ++++++++++++++++++++++++++ overrides/override-other.txt | 10 ++++++++++ 2 files changed, 36 insertions(+) diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt index 3dc43fd..a7594bf 100644 --- a/overrides/override-a1.txt +++ b/overrides/override-a1.txt @@ -166,6 +166,17 @@ descr: Privex Inc. remarks: VPN and Tor relay provider is-anonymous-proxy: yes +aut-num: AS212052 +descr: BOET NOTIFY LTD. +remarks: VPN provider [high confidence, but not proofed] +is-anonymous-proxy: yes + +aut-num: AS212786 +descr: Pooky L&W SDN BHD +remarks: VPN provider [high confidence, but not proofed] +is-anonymous-proxy: yes +country: GB + aut-num: AS212987 descr: NekoCloud Solutions Limited remarks: VPN provider [high confidence, but not proofed] @@ -246,6 +257,16 @@ descr: Privax LTD / PRCDN Consumer Pool / AVAST s.r.o. remarks: VPN provider is-anonymous-proxy: yes +net: 5.182.34.0/24 +descr: Coca Proxies VOF +remarks: VPN provider +is-anonymous-proxy: yes + +net: 5.182.35.0/24 +descr: Coca Proxies VOF +remarks: VPN provider +is-anonymous-proxy: yes + net: 5.249.160.0/24 descr: VPNTunnel remarks: VPN provider @@ -1213,6 +1234,11 @@ descr: PureVPN remarks: VPN provider is-anonymous-proxy: yes +net: 193.42.136.0/24 +descr: IntelligenceHosting +remarks: VPN provider [high confidence, but not proofed] +is-anonymous-proxy: yes + net: 193.150.8.0/22 descr: GZ Systems Limited / PureVPN remarks: VPN provider diff --git a/overrides/override-other.txt b/overrides/override-other.txt index 30ac0db..b34f055 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -53,6 +53,11 @@ descr: Yes Networks Unlimited Ltd remarks: traces to UA, but some RIR entries seem to contain garbage (VG) country: UA +aut-num: AS25098 +descr: Netcalibre Ltd. +remarks: ISP located in GB, but some RIR data for announced prefixes contain garbage/ +country: GB + aut-num: AS28098 descr: ABGON Comunicaciones remarks: ISP located in CL, but some RIR data for announced prefixes contain garbage (BZ) @@ -283,6 +288,11 @@ descr: Gudaev Maxim Amrakhovich remarks: announcements scatter across various places in EU (DE/CZ/??), but RIR data contain garbage country: EU +aut-num: AS213035 +descr: Serverion BV +remarks: ISP located in NL, but RIR data for most announced prefixes contain garbage +country: NL + aut-num: AS213058 descr: Private Internet Hosting LTD remarks: bulletproof ISP located in RU -- 2.26.2

1 0

[PATCH] location-importer.in: skip networks with unknown country codes
by Peter Müller 04 Feb '21

04 Feb '21

There is no sense in parsing and storting networks whose country codes cannot be found in the ISO-3166-x country code table. This avoids side effects in applications using the location database, and introduces another sanity check to compensate bogus RIR data. On location02, this affects some networks from APNIC (country code: ZZ) as well as a bunch of smaller allocations within the RIPE region still tagged to CS or YU (Yugoslavia). To my surprise, no network tagged as SU (Soviet Union) was found - while the NIC for .su TLD is still operational. :-) Fixes: #12510 Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- src/python/location-importer.in | 42 ++++++++++++++++++++++----------- 1 file changed, 28 insertions(+), 14 deletions(-) diff --git a/src/python/location-importer.in b/src/python/location-importer.in index 864eab1..89b556a 100644 --- a/src/python/location-importer.in +++ b/src/python/location-importer.in @@ -388,10 +388,17 @@ class CLI(object): TRUNCATE TABLE networks; """) + # Fetch all valid country codes to check parsed networks aganist... + rows = self.db.query("SELECT * FROM countries ORDER BY country_code") + validcountries = [] + + for row in rows: + validcountries.append(row.country_code) + for source in location.importer.WHOIS_SOURCES: with downloader.request(source, return_blocks=True) as f: for block in f: - self._parse_block(block) + self._parse_block(block, validcountries) # Process all parsed networks from every RIR we happen to have access to, # insert the largest network chunks into the networks table immediately... @@ -467,7 +474,7 @@ class CLI(object): # Download data with downloader.request(source) as f: for line in f: - self._parse_line(line) + self._parse_line(line, validcountries) def _check_parsed_network(self, network): """ @@ -532,7 +539,7 @@ class CLI(object): # be suitable for libloc consumption... return True - def _parse_block(self, block): + def _parse_block(self, block, validcountries = None): # Get first line to find out what type of block this is line = block[0] @@ -542,7 +549,7 @@ class CLI(object): # inetnum if line.startswith("inet6num:") or line.startswith("inetnum:"): - return self._parse_inetnum_block(block) + return self._parse_inetnum_block(block, validcountries) # organisation elif line.startswith("organisation:"): @@ -573,7 +580,7 @@ class CLI(object): autnum.get("asn"), autnum.get("org"), ) - def _parse_inetnum_block(self, block): + def _parse_inetnum_block(self, block, validcountries = None): log.debug("Parsing inetnum block:") inetnum = {} @@ -624,17 +631,17 @@ class CLI(object): if not inetnum or not "country" in inetnum: return - # Skip objects with bogus country code 'ZZ' - if inetnum.get("country") == "ZZ": - log.warning("Skipping network with bogus country 'ZZ': %s" % \ - (inetnum.get("inet6num") or inetnum.get("inetnum"))) - return - network = ipaddress.ip_network(inetnum.get("inet6num") or inetnum.get("inetnum"), strict=False) if not self._check_parsed_network(network): return + # Skip objects with unknown country codes + if validcountries and inetnum.get("country") not in validcountries: + log.warning("Skipping network with bogus country '%s': %s" % \ + (inetnum.get("country"), inetnum.get("inet6num") or inetnum.get("inetnum"))) + return + self.db.execute("INSERT INTO _rirdata(network, country) \ VALUES(%s, %s) ON CONFLICT (network) DO UPDATE SET country = excluded.country", "%s" % network, inetnum.get("country"), @@ -659,7 +666,7 @@ class CLI(object): org.get("organisation"), org.get("org-name"), ) - def _parse_line(self, line): + def _parse_line(self, line, validcountries = None): # Skip version line if line.startswith("2"): return @@ -674,8 +681,15 @@ class CLI(object): log.warning("Could not parse line: %s" % line) return - # Skip any lines that are for stats only - if country_code == "*": + # Skip any lines that are for stats only or do not have a country + # code at all (avoids log spam below) + if not country_code or country_code == '*': + return + + # Skip objects with unknown country codes + if validcountries and country_code not in validcountries: + log.warning("Skipping line with bogus country '%s': %s" % \ + (country_code, line)) return if type in ("ipv6", "ipv4"): -- 2.20.1

1 2

[PATCH] location-importer.in: reduce log noise for unusable networks
by Peter Müller 25 Jan '21

25 Jan '21

These are nothing to worry about, which is why debug log facility is more suitable here than informational or warning. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- src/python/location-importer.in | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/src/python/location-importer.in b/src/python/location-importer.in index a4be445..c5ebb54 100644 --- a/src/python/location-importer.in +++ b/src/python/location-importer.in @@ -494,12 +494,12 @@ class CLI(object): return False if not network.is_global: - log.warning("Skipping non-globally routable network: %s" % network) + log.debug("Skipping non-globally routable network: %s" % network) return False if network.version == 4: if network.prefixlen < 7: - log.warning("Skipping too big IP chunk: %s" % network) + log.debug("Skipping too big IP chunk: %s" % network) return False if network.prefixlen > 24: @@ -507,12 +507,12 @@ class CLI(object): return False if str(network.network_address) == "0.0.0.0": - log.warning("Skipping network based on 0.0.0.0: %s" % network) + log.debug("Skipping network based on 0.0.0.0: %s" % network) return False elif network.version == 6: if network.prefixlen < 10: - log.warning("Skipping too big IP chunk: %s" % network) + log.debug("Skipping too big IP chunk: %s" % network) return False if network.prefixlen > 48: @@ -520,7 +520,7 @@ class CLI(object): return False if str(network.network_address) == "::": - log.warning("Skipping network based on '::': %s" % network) + log.debug("Skipping network based on '::': %s" % network) return False else: @@ -587,7 +587,7 @@ class CLI(object): # not managed by that specific RIR... if key == "netname": if re.match(r"(ERX-NETBLOCK|(AFRINIC|ARIN|LACNIC|RIPE)-CIDR-BLOCK|IANA-NETBLOCK-\d{1,3}|NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK)", val.strip()): - log.warning("Skipping record indicating historic/orphaned data: %s" % val.strip()) + log.debug("Skipping record indicating historic/orphaned data: %s" % val.strip()) return if key == "inetnum": -- 2.26.2

2 1

[PATCH] location-importer.in: delete 6to4 IPv6 space as well
by Peter Müller 25 Jan '21

25 Jan '21

2002::/16 is an anycast prefix for 6to4 scenarios, as specified in RFC 3068. We currently process an announcement from Hurricane Electric for it, and since it is an anycast network, multiple entities across the world announce it as well. Thereof, it does not make sense to include it in the database - as of today, we do not have a country for it, either. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- src/python/location-importer.in | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/python/location-importer.in b/src/python/location-importer.in index a4be445..1a025bb 100644 --- a/src/python/location-importer.in +++ b/src/python/location-importer.in @@ -768,8 +768,9 @@ class CLI(object): -- DELETE link local address space DELETE FROM announcements WHERE family(network) = 4 AND network <<= '169.254.0.0/16'; - -- DELETE IPv6 to IPv4 (6to4) address space + -- DELETE IPv6 to IPv4 (6to4) address space (RFC 3068) DELETE FROM announcements WHERE family(network) = 4 AND network <<= '192.88.99.0/24'; + DELETE FROM announcements WHERE family(network) = 6 AND network <<= '2002::/16'; -- DELETE multicast and reserved address space DELETE FROM announcements WHERE family(network) = 4 AND network <<= '224.0.0.0/4'; -- 2.26.2

2 1

[PATCH] overrides-*: weekly batch of various overrides
by Peter Müller 22 Jan '21

22 Jan '21

Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- overrides/override-a1.txt | 5 ++ overrides/override-a2.txt | 105 +++++++++++++++++++++++++++++++++-- overrides/override-other.txt | 25 +++++++++ 3 files changed, 130 insertions(+), 5 deletions(-) diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt index 6f04bd6..3dc43fd 100644 --- a/overrides/override-a1.txt +++ b/overrides/override-a1.txt @@ -156,6 +156,11 @@ remarks: (Rogue) VPN provider is-anonymous-proxy: yes country: EU +aut-num: AS209854 +descr: Surfshark Ltd. +remarks: VPN provider +is-anonymous-proxy: yes + aut-num: AS210083 descr: Privex Inc. remarks: VPN and Tor relay provider diff --git a/overrides/override-a2.txt b/overrides/override-a2.txt index cd4807e..b92f408 100644 --- a/overrides/override-a2.txt +++ b/overrides/override-a2.txt @@ -17,6 +17,16 @@ descr: Speedcast Communications, Inc. remarks: Satellite Internet provider is-satellite-provider: yes +aut-num: AS5377 +descr: Marlink AS +remarks: Satellite Internet provider [high confidence, but not proofed] +is-satellite-provider: yes + +aut-num: AS6621 +descr: Hughes Network Systems +remarks: Satellite Internet provider [several satellite dial-in pools] +is-satellite-provider: yes + aut-num: AS7058 descr: ViaSat, Inc. remarks: Satellite Internet provider @@ -32,11 +42,6 @@ descr: ViaSat, Inc. remarks: Satellite Internet provider is-satellite-provider: yes -aut-num: AS16491 -descr: ViaSat, Inc. -remarks: Satellite Internet provider [several satellite dial-in pools] -is-satellite-provider: yes - aut-num: AS5666 descr: Speedcast Communications, Inc. remarks: Satellite Internet provider @@ -57,6 +62,16 @@ descr: the Tennessean, a division of Gannett Satellite Information Network, remarks: Satellite Internet provider is-satellite-provider: yes +aut-num: AS11902 +descr: World-Link Communications, Inc. +remarks: Satellite Internet provider +is-satellite-provider: yes + +aut-num: AS12440 +descr: Hughes Network Systems GmbH +remarks: Satellite Internet provider +is-satellite-provider: yes + aut-num: AS12491 descr: Gitlat Satcom remarks: Satellite Internet provider @@ -77,6 +92,21 @@ descr: Signalhorn Trusted Networks GmbH / Satlynx remarks: Satellite Internet provider is-satellite-provider: yes +aut-num: AS16491 +descr: ViaSat, Inc. +remarks: Satellite Internet provider [several satellite dial-in pools] +is-satellite-provider: yes + +aut-num: AS17458 +descr: Sure (Diego Garcia) Limited +remarks: Satellite Internet provider [high confidence, but not proofed] +is-satellite-provider: yes + +aut-num: AS17648 +descr: Hughes Communications India Private Limited +remarks: Satellite Internet provider +is-satellite-provider: yes + aut-num: AS18477 descr: G2 Satellite Solutions Corporation remarks: Satellite Internet provider @@ -102,6 +132,11 @@ descr: Intelsat Global Service Corporation remarks: Satellite Internet provider is-satellite-provider: yes +aut-num: AS23652 +descr: XLR8 +remarks: Satellite Internet provider [high confidence, but not proofed] +is-satellite-provider: yes + aut-num: AS25222 descr: Inmarsat Solutions B.V. remarks: Satellite Internet provider @@ -182,6 +217,21 @@ descr: SatTel Corporation, Ltd. remarks: Satellite Internet provider is-satellite-provider: yes +aut-num: AS37406 +descr: RCS-Communication +remarks: Satellite Internet provider +is-satellite-provider: yes + +aut-num: AS37414 +descr: Microcom Sprl +remarks: Satellite Internet provider +is-satellite-provider: yes + +aut-num: AS38009 +descr: Telikom PNG Satellite +remarks: Satellite Internet provider +is-satellite-provider: yes + aut-num: AS39102 descr: SatTel Corporation, Ltd. remarks: Satellite Internet provider @@ -318,6 +368,11 @@ descr: IPStar remarks: Satellite Internet provider [high confidence, but not proofed] is-satellite-provider: yes +aut-num: AS136940 +descr: ComSat Ltd. +remarks: Satellite Internet provider +is-satellite-provider: yes + aut-num: AS139034 descr: Sattelite Plus Incorporated remarks: Satellite Internet provider @@ -353,6 +408,11 @@ descr: Matooma SAS remarks: Satellite Internet provider is-satellite-provider: yes +aut-num: AS204649 +descr: Sure South Atlantic Limited +remarks: Satellite Internet provider +is-satellite-provider: yes + aut-num: AS206283 descr: YahClick / Star Satellite Communications Company - PJSC remarks: Satellite Internet provider @@ -363,6 +423,21 @@ descr: ALCON TELECOM LTD remarks: Satellite Internet provider is-satellite-provider: yes +aut-num: AS265705 +descr: HUGHES DE COLOMBIA S.A.S. +remarks: Satellite Internet provider +is-satellite-provider: yes + +aut-num: AS327870 +descr: Global Broadband Solution +remarks: Satellite Internet provider [high confidence, but not proofed] +is-satellite-provider: yes + +aut-num: AS328121 +descr: Atlantic Future Technology Niger +remarks: Satellite Internet provider [high confidence, but not proofed] +is-satellite-provider: yes + aut-num: AS393582 descr: VIDEO DIRECT SATELLITE & ENTERTAINMENT / WisperISP remarks: Satellite Internet provider @@ -1368,6 +1443,11 @@ descr: Satellite Solutions Worldwide Ltd remarks: Satellite Internet provider is-satellite-provider: yes +net: 185.25.211.0/24 +descr: Liquid Telecom VSAT Network +remarks: Satellite Internet provider +is-satellite-provider: yes + net: 185.27.248.0/22 descr: HDI Group Cooperatief U.A. remarks: Satellite Internet provider [high confidence, but not proofed] @@ -1493,6 +1573,11 @@ descr: Arab Satellite Communications Organization remarks: Satellite Internet provider is-satellite-provider: yes +net: 186.1.128.0/19 +descr: HUGHES DE COLOMBIA S.A.S. +remarks: Satellite Internet provider +is-satellite-provider: yes + net: 186.208.32.0/20 descr: CapRock Comunicacoes do Brasil Ltda remarks: Satellite Internet provider @@ -1613,6 +1698,11 @@ descr: SPEEDCAST Limited remarks: Satellite Internet provider is-satellite-provider: yes +net: 203.16.25.0/24 +descr: Hughes Communications Inc. +remarks: Satellite Internet provider +is-satellite-provider: yes + net: 203.88.64.0/19 descr: SPEEDCAST Limited remarks: Satellite Internet provider @@ -1628,6 +1718,11 @@ descr: Indian Ocean Territories Telecom Pty Ltd remarks: Satellite Internet provider is-satellite-provider: yes +net: 204.115.0.0/22 +descr: Hughes Communications Inc. +remarks: Satellite Internet provider +is-satellite-provider: yes + net: 208.25.12.0/24 descr: Iridium North America remarks: Satellite Internet provider diff --git a/overrides/override-other.txt b/overrides/override-other.txt index 7fe50db..30ac0db 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -113,6 +113,11 @@ descr: Cloud Management LLC remarks: tampers with RIR data, traces back to HK country: HK +aut-num: AS44477 +descr: IP Oleinichenko Denis +remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage +country: RU + aut-num: AS48090 descr: PPTECHNOLOGY LIMITED remarks: bulletproof ISP (related to AS204655) located in NL @@ -208,6 +213,11 @@ descr: AVATEL TELECOM remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage country: ES +aut-num: AS201118 +descr: Intelcom Group Ltd. +remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage +country: RU + aut-num: AS201133 descr: Verdina Ltd. remarks: ISP located in BG, but RIR data for announced prefixes contain garbage @@ -228,6 +238,11 @@ descr: SILVERHILL GROUP HOLDING LTD / SAKIS POLUNIGIS remarks: fake offshore location (SC), traces back to NL country: NL +aut-num: AS202769 +descr: Cooperative Investments LLC +remarks: bulletproof ISP and IP hijacker, related to AS202425 and AS62355, traces to NL +country: NL + aut-num: AS204655 descr: Novogara Ltd. remarks: bulletproof ISP (strongly linked to AS202425) located in NL @@ -288,6 +303,11 @@ descr: Sun Network Company Limited remarks: IP hijacker, traces back to AP region country: AP +aut-num: AS328671 +descr: Datapacket Maroc SARL +remarks: bulletproof ISP (strongly linked to AS202425) located in NL +country: NL + aut-num: AS398478 descr: PEG TECH INC remarks: ISP located in HK, tampers with RIR data @@ -403,6 +423,11 @@ descr: Datashield, Inc. remarks: fake offshore location (SC), traces back to NL country: NL +net: 185.85.120.0/22 +descr: Intelcom Group Ltd +remarks: fake offshore location (SC), traces back to RU +country: RU + net: 185.140.204.0/22 descr: Hornetsecurity GmbH remarks: all suballocations are used in DE, but are assigned to US -- 2.26.2

1 0

2024

2023

2022

2021

2020

2019

2018

2017

Location