- Location - lists.ipfire.org

Countries nomenclature database
by Pierre Equoy 24 Aug '20

24 Aug '20

Hello, I recently discovered the IPFire Location project[1] and I like that there is an open alternative to Maxmind GeoIP database. I live in Taiwan, and when I connected on the website[1], I was greeted with: "You are visiting from Taiwan, Province of China" I am indeed visiting from Taiwan, but Taiwan is not a province of China. I had a look at the source code[2] but couldn't find the database you are using in order to provide a patch. Is it possible to modify the wording? Thanks, [1] https://location.ipfire.org/ [2] https://git.ipfire.org/?p=location/libloc.git;a=summary -- Pierre Sent with ProtonMail Secure Email.

2 3

[PATCH] perl: Add get_as_name()
by Stefan Schantl 22 Aug '20

22 Aug '20

This function can be use to give the numer of an Autonomous System and get back the stored name from the used location database. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- src/perl/Location.xs | 23 +++++++++++++++++++++++ src/perl/t/Location.t | 7 +++++-- 2 files changed, 28 insertions(+), 2 deletions(-) diff --git a/src/perl/Location.xs b/src/perl/Location.xs index 3c347db..7afa3e7 100644 --- a/src/perl/Location.xs +++ b/src/perl/Location.xs @@ -229,6 +229,29 @@ get_continent_code(db, ccode) OUTPUT: RETVAL +SV* +get_as_name(db, as_number) + struct loc_database* db; + unsigned int as_number; + + CODE: + RETVAL = &PL_sv_undef; + + // Lookup AS. + struct loc_as *as; + int err = loc_database_get_as(db, &as, as_number); + if(!err) { + // Get the name of the given AS number. + const char* as_name = loc_as_get_name(as); + + RETVAL = newSVpv(as_name, strlen(as_name)); + + loc_as_unref(as); + } + + OUTPUT: + RETVAL + void DESTROY(db) struct loc_database* db; diff --git a/src/perl/t/Location.t b/src/perl/t/Location.t index ec7f1e0..0d9a1a5 100644 --- a/src/perl/t/Location.t +++ b/src/perl/t/Location.t @@ -12,7 +12,7 @@ use warnings; my $testdb = $ENV{'database'}; my $keyfile = $ENV{'keyfile'}; -use Test::More tests => 8; +use Test::More tests => 9; BEGIN { use_ok('Location') }; ######################### @@ -57,5 +57,8 @@ if(defined($as_number)) { fail("Test 8 - Lookup Autonomous System Number for add $as_number = &Location::lookup_asn($db, "a.b.c.d"); if(defined($as_number)) { fail("Test 9 - Lookup Autonomous System Number for invalid address.") } +my $as_name = &Location::get_as_name($db, "204867"); +ok($as_name eq "Lightning Wire Labs GmbH", "Test 10 - Get name for AS204867."); + my @locations = &Location::database_countries($db); -ok(@locations != 0, "Test 10 - Get database countries."); +ok(@locations != 0, "Test 11 - Get database countries."); -- 2.20.1

1 0

[PATCH 1/3] perl: Add database_countries() function.
by Stefan Schantl 21 Aug '20

21 Aug '20

This function is used to the stored countries of a database, which easily can be assigned to an array. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- src/perl/Location.xs | 42 ++++++++++++++++++++++++++++++++++++++++-- 1 file changed, 40 insertions(+), 2 deletions(-) diff --git a/src/perl/Location.xs b/src/perl/Location.xs index 5693744..3c347db 100644 --- a/src/perl/Location.xs +++ b/src/perl/Location.xs @@ -6,11 +6,10 @@ #include <stdio.h> #include <string.h> - #include <loc/libloc.h> #include <loc/database.h> #include <loc/network.h> - +#include <loc/country.h> MODULE = Location PACKAGE = Location @@ -119,6 +118,45 @@ get_license(db) OUTPUT: RETVAL +void +database_countries(db) + struct loc_database* db; + + PPCODE: + // Create Database enumerator + struct loc_database_enumerator* enumerator; + int err = loc_database_enumerator_new(&enumerator, db, LOC_DB_ENUMERATE_COUNTRIES); + + if (err) { + croak("Could not create a database enumerator\n"); + } + + // Init and enumerate first country. + struct loc_country* country; + err = loc_database_enumerator_next_country(enumerator, &country); + if (err) { + croak("Could not enumerate next country\n"); + } + + while (country) { + // Extract the country code. + const char* ccode = loc_country_get_code(country); + + // Push country code. + XPUSHs(sv_2mortal(newSVpv(ccode, 2))); + + // Unref country pointer. + loc_country_unref(country); + + // Enumerate next item. + err = loc_database_enumerator_next_country(enumerator, &country); + if (err) { + croak("Could not enumerate next country\n"); + } + } + + loc_database_enumerator_unref(enumerator); + # # Lookup functions # -- 2.20.1

2 3

[PATCH 1/3] A1 overrides: add 45.154.138.0/24
by Peter Müller 17 Aug '20

17 Aug '20

Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- overrides/override-a1.txt | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt index 582cd55..858e86d 100644 --- a/overrides/override-a1.txt +++ b/overrides/override-a1.txt @@ -359,6 +359,11 @@ descr: VPN Consumer Network remarks: VPN provider is-anonymous-proxy: yes +net: 45.154.138.0/24 +descr: Express VPN International Ltd +remarks: VPN provider +is-anonymous-proxy: yes + net: 45.220.72.0/22 descr: Low budget VPN service remarks: VPN provider -- 2.26.2

1 2

Core Update 148 (testing) report
by Peter Müller 09 Aug '20

09 Aug '20

Hello *, Core Update 148 (testing, see: https://blog.ipfire.org/post/ipfire-2-25-core-update-148-is-available-for-t…) is running here for about a week without any major issues so far. Sorry for being late this time. Looking at the ipinfo.cgi, it currently displays the country returned by the location database, which should always be a valid one, as we decided not no override them for "special" IP addresses such as anonymous proxies, satellite providers, or anycast networks. However, we do not display this information to the user. While I have no idea about how to do that for CGIs such as the DNS settings, or the connection tracking table, the ipinfo.cgi should contain such information from my point of view. (I suspect this raising questions in the community as well.) It would be nice to have AS information displayed on ipinfo.cgi as well, but since we do not process them elsewhere, this is definitively not a show-stopper. Thanks to Michael for being the "master of disaster" behind libloc (no offense intended ;-) ) and providing me with answers to it and testing environment. Thanks to Stefan for building the Perl bindings and adjusting CGIs and firewall scripts. Thanks, and best regards, Peter Müller

2 1

[PATCH] location: Provide a return code if the database does not need to be updated.
by Stefan Schantl 04 Aug '20

04 Aug '20

Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- src/python/location.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/python/location.in b/src/python/location.in index 5211b28..8cdd140 100644 --- a/src/python/location.in +++ b/src/python/location.in @@ -416,7 +416,7 @@ class CLI(object): _("The datase has recently be updated recently (%s)") % \ format_timedelta(now - t), ) - return + return 3 # Fetch the timestamp we need from DNS t = location.discover_latest_version() -- 2.20.1

2 1

[PATCH] A2 overrides: add AS132513 (Sky Telecom State Company)
by Peter Müller 29 Jul '20

29 Jul '20

Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- overrides/override-a2.txt | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/overrides/override-a2.txt b/overrides/override-a2.txt index 5e810b1..b0109f7 100644 --- a/overrides/override-a2.txt +++ b/overrides/override-a2.txt @@ -192,6 +192,11 @@ descr: NYNEX satellite OHG remarks: Satellite Internet provider is-satellite-provider: yes +aut-num: AS132513 +descr: Sky Telecom State Company +remarks: Satellite Internet provider +is-satellite-provider: yes + aut-num: AS135324 descr: IPStar remarks: Satellite Internet provider [high confidence, but not proofed] -- 2.26.2

1 0

[PATCH] A1 overrides: add 45.41.135.0/24
by Peter Müller 11 Jul '20

11 Jul '20

Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- overrides/override-a1.txt | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt index 0d55ab3..0639784 100644 --- a/overrides/override-a1.txt +++ b/overrides/override-a1.txt @@ -329,6 +329,11 @@ descr: VPN Consumer Network remarks: VPN provider is-anonymous-proxy: yes +net: 45.41.135.0/24 +descr: VPN Consumer Network +remarks: VPN provider +is-anonymous-proxy: yes + net: 45.41.136.0/24 descr: VPN Consumer Network remarks: VPN provider -- 2.26.2

1 0

[PATCH] A3 overrides: Initial Commit
by Peter Müller 11 Jul '20

11 Jul '20

Partially fixes: #11760 Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- overrides/override-a3.txt | 290 ++++++++++++++++++++++++++++++++++++++ 1 file changed, 290 insertions(+) diff --git a/overrides/override-a3.txt b/overrides/override-a3.txt index 4fbcdeb..e692f4c 100644 --- a/overrides/override-a3.txt +++ b/overrides/override-a3.txt @@ -8,3 +8,293 @@ # It does not make sense to assign them to a certain country, they # will be flagged as "A3" in the database. # + +aut-num: AS69 +descr: University of Pennsylvania +remarks: Generic anycast network +is-anycast: yes + +aut-num: AS4935 +descr: DirectNIC, Ltd. +remarks: Generic anycast network [high confidence, but not proofed] +is-anycast: yes + +aut-num: AS33463 +descr: Citigroup +remarks: Public anycast DNS resolver network [high confidence, but not proofed] +is-anycast: yes + +aut-num: AS34868 +descr: wasted.io Ltd. +remarks: Generic anycast network +is-anycast: yes + +aut-num: AS37177 +descr: AfriNIC Anycast Services +remarks: Generic anycast network +is-anycast: yes + +aut-num: AS40568 +descr: Canadian Internet Registration Authority (CIRA) +remarks: Generic anycast network +is-anycast: yes + +aut-num: AS48550 +descr: Pascal Mathis trading as SnapServ Mathis +remarks: Generic anycast network +is-anycast: yes + +aut-num: AS50069 +descr: Misaka Network, Inc. +remarks: Generic anycast network +is-anycast: yes + +aut-num: AS58093 +descr: coreIT.pl +remarks: Generic anycast network +is-anycast: yes + +aut-num: AS60890 +descr: CentralNic Ltd +remarks: Generic anycast network +is-anycast: yes + +aut-num: AS61005 +descr: OpenTLD BV +remarks: Generic anycast network +is-anycast: yes + +aut-num: AS61007 +descr: OpenTLD BV +remarks: Generic anycast network +is-anycast: yes + +aut-num: AS62766 +descr: SJB Communications +remarks: Generic anycast network +is-anycast: yes + +aut-num: AS134389 +descr: AusRegistry +remarks: Generic anycast network +is-anycast: yes + +aut-num: AS134393 +descr: AusRegistry +remarks: Generic anycast network +is-anycast: yes + +aut-num: AS134396 +descr: AusRegistry +remarks: Generic anycast network +is-anycast: yes + +aut-num: AS198794 +descr: Thomas Steen Rasmussen / UncensoredDNS / censurfridns.dk +remarks: Public anycast DNS resolver network +is-anycast: yes + +aut-num: AS199365 +descr: ProstoDNS +remarks: Public anycast DNS resolver network +is-anycast: yes + +aut-num: AS201303 +descr: CentralNic Ltd +remarks: Generic anycast network +is-anycast: yes + +aut-num: AS201304 +descr: CentralNic Ltd +remarks: Generic anycast network +is-anycast: yes + +aut-num: AS203961 +descr: CentralNic Ltd +remarks: Generic anycast network +is-anycast: yes + +aut-num: AS204055 +descr: CentralNic Ltd +remarks: Generic anycast network +is-anycast: yes + +aut-num: AS205157 +descr: Daniel Cid +remarks: Generic anycast network [high confidence, but not proofed] +is-anycast: yes + +aut-num: AS205541 +descr: DEVCLIC SARL +remarks: Generic anycast network +is-anycast: yes + +aut-num: AS207021 +descr: ipcom GmbH +remarks: Generic anycast network +is-anycast: yes + +aut-num: AS210004 +descr: Stichting Internet Domeinregistratie Nederland (SIDN) +remarks: Generic anycast network +is-anycast: yes + +aut-num: AS396981 +descr: Deteque LLC +remarks: Generic anycast network +is-anycast: yes + +net: 1.0.0.0/24 +descr: Cloudflare, Inc. +remarks: Public anycast DNS resolver +is-anycast: yes + +net: 1.1.1.0/24 +descr: Cloudflare, Inc. +remarks: Public anycast DNS resolver +is-anycast: yes + +net: 8.8.4.0/24 +descr: Google LLC +remarks: Public anycast DNS resolver +is-anycast: yes + +net: 8.8.8.0/24 +descr: Google LLC +remarks: Public anycast DNS resolver +is-anycast: yes + +net: 9.9.9.0/24 +descr: Quad9 +remarks: Public anycast DNS resolver +is-anycast: yes + +net: 91.239.100.0/24 +descr: Thomas Steen Rasmussen / UncensoredDNS / censurfridns.dk +remarks: Public anycast DNS resolver +is-anycast: yes + +net: 149.112.120.0/21 +descr: Canadian Internet Registration Authority (CIRA) +remarks: Generic anycast network +is-anycast: yes + +net: 170.52.0.0/21 +descr: subspace +remarks: Generic anycast network [high confidence, but not proofed] +is-anycast: yes + +net: 185.143.232.0/22 +descr: Noyan Abr Arvan Co. +remarks: Generic anycast network +is-anycast: yes + +net: 185.151.140.0/22 +descr: DENIC eG +remarks: Generic anycast network +is-anycast: yes + +net: 185.184.222.0/24 +descr: xTom / dns.sb +remarks: Public anycast DNS resolver +is-anycast: yes + +net: 185.228.168.0/22 +descr: Daniel Cid +remarks: Generic anycast network +is-anycast: yes + +net: 185.222.221.0/24 +descr: xTom / dns.sb +remarks: Public anycast DNS resolver +is-anycast: yes + +net: 185.222.222.0/24 +descr: xTom / dns.sb +remarks: Public anycast DNS resolver +is-anycast: yes + +net: 196.216.168.0/24 +descr: AfriNIC Anycast Services +remarks: Generic anycast network +is-anycast: yes + +net: 212.102.32.0/24 +descr: CDN77 +remarks: Generic anycast network +is-anycast: yes + +net: 2001:43f8:120::/48 +descr: AfriNIC Anycast Services +remarks: Generic anycast network +is-anycast: yes + +net: 2001:470::/32 +descr: Hurricane Electric LLC +remarks: Public anycast DNS resolver +is-anycast: yes + +net: 2001:4ce8::/29 +descr: wasted.io Ltd. +remarks: Generic anycast network +is-anycast: yes + +net: 2001:67c:28a4::/48 +descr: Thomas Steen Rasmussen / UncensoredDNS / censurfridns.dk +remarks: Public anycast DNS resolver +is-anycast: yes + +net: 2606:4700:4700::/48 +descr: Cloudflare, Inc. +remarks: Public anycast DNS resolver +is-anycast: yes + +net: 2a00:139b::/32 +descr: Karlsruhe Institute of Technology (KIT) +remarks: Generic anycast network +is-anycast: yes + +net: 2a03:4d40::/29 +descr: marbis GmbH +remarks: Generic anycast network [high confidence, but not proofed] +is-anycast: yes + +net: 2a06:e881:4001::/48 +descr: Thomas Harwood +remarks: Public anycast DNS resolver +is-anycast: yes + +net: 2a07:59c6:d006::/48 +descr: NetShelter +remarks: Generic anycast network +is-anycast: yes + +net: 2a09::/48 +descr: xTom / dns.sb +remarks: Public anycast DNS resolver +is-anycast: yes + +net: 2a0c:3800:ff::/48 +descr: Jean-Remy Buchs +remarks: Generic anycast network +is-anycast: yes + +net: 2a0d:2900::/48 +descr: Misaka Network Anycast +remarks: Generic anycast network +is-anycast: yes + +net: 2a0d:77c0::/29 +descr: Hostus Solutions LLC +remarks: Generic anycast network +is-anycast: yes + +net: 2a0e:b4c0::/48 +descr: Link Connectivity Limited +remarks: Generic anycast network +is-anycast: yes + +net: 2a0f:b300:b300::/48 +descr: Fastservers v6 Anycast +remarks: Generic anycast network +is-anycast: yes -- 2.26.2

1 0

[PATCH] A1 overrides: add DFRI Tor networks
by Peter Müller 11 Jul '20

11 Jul '20

Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- overrides/override-a1.txt | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt index 0d55ab3..eec360e 100644 --- a/overrides/override-a1.txt +++ b/overrides/override-a1.txt @@ -754,6 +754,11 @@ descr: IPNET-VPNS remarks: VPN provider [high confidence, but not proofed] is-anonymous-proxy: yes +net: 171.25.193.0/24 +descr: DFRI +remarks: Tor relay provider +is-anonymous-proxy: yes + net: 172.94.0.0/17 descr: Secure Internet LLC / Internet Security / ... remarks: VPN provider @@ -1279,6 +1284,11 @@ descr: IP Range assigned for VPN Service of VDC remarks: VPN provider is-anonymous-proxy: yes +net: 2001:67c:289c::/48 +descr: DFRI +remarks: Tor relay provider +is-anonymous-proxy: yes + net: 2405:db00::/32 descr: VPNSolutions Pty. Ltd. remarks: VPN provider -- 2.26.2

1 0

2024

2023

2022

2021

2020

2019

2018

2017

Location