- Location - lists.ipfire.org

Auto-generated plaintext updates; re: regression
by Jordan Savoca 10 Mar '22

10 Mar '22

Hello o/ Would it be possible to deploy the patch to the 0.9.11 regression on the system which generates the database.txt file committed to the location-database repository[1]? The database is currently devoid of IP announcement information. Thank so much! [1] https://git.ipfire.org/?p=location/location-database.git;a=summary -- Jordan Savoca

2 4

Plain text libloc database dumps are currently missing any IP network information
by Peter Müller 04 Mar '22

04 Mar '22

Hello libloc users, apparently, libloc 0.9.11 (https://lists.ipfire.org/pipermail/location/2022-March/000536.html) introduced a regression in the "dump" command, which dumps any given location database into one big, plain text file. After upgrading to 0.9.11, this file does not contain any IP network information, only information related to Autonomous Systems. Anybody using the _actual_ binary location database (for example, via "location lookup") is not affected. This issue only affects users relying on plain text database dumps. While this bug is currently under investigation (https://bugzilla.ipfire.org/show_bug.cgi?id=12790), affected users can temporarily go back to libloc 0.9.10, where "location dump" works fine, including dumping databases generated by libloc 0.9.11. Apologies for any inconvenience caused. Thanks, and best regards, Peter Müller

1 0

libloc 0.9.11 released
by Michael Tremer 03 Mar '22

03 Mar '22

Hello, This is the release announcement for libloc 0.9.11. It comes with the following changes: Most changes are around the exporter, which is now able to write any output to the console. This is useful when you want to load a custom list of countries or ASes directly into ipset or nftables like so: root@michael:/build/libloc# location -d /var/lib/location/database.db export --format=nftables --family=ipv6 AS204867 VA define VAv6 = { 2a01:b8::/32, 2a01:84a0:2000::/40, 2a04:640::/29, 2a06:9f80::/29, 2a06:a005:4::/48, 2a07:8100::/29, 2a09:4c0:f100::/40, 2a0e:b101:f100::/40, 2a0e:b107:aef::/48, 2a0e:b107:1000::/44, 2a0f:b9c1:100::/46, 2a0f:b9c1:10e::/48, } define AS204867v6 = { 2001:678:b28::/48, } This command lists all sets that belong to AS204867 or VA in the desired format. In order to increase performance, we will now no longer “flatten” the tree for ipset and nftables, because those formats can handle overlapping networks. xt_geoip on the other hand needed a list of non-overlapping, sorted IP networks, which causes a lot of extra work to convert the data from the database into this format. The names of the sets have been already for ipset and nftables. For a country XX, the sets are now called XXv6 and XXv4 for IPv6 and IPv4 respectively. The same schema applies to autonomous systems, e.g.: AS204867v6 AS204867v4. This change was required because sets cannot mix IPv6 and IPv4 addresses and it is desirable to use both. For ipset, the parameters that create a set have been changed: * The maximum size of each set is set to 1 million. We used to hard-code 64k, which was exceeded by a couple of countries, and setting it to the actual size of a set didn’t allow to reload a set in ipset without destroying the format set first. For that reason, we set this to a maximum that nobody should ever reach. * The hashsize used to be set to 1024 which is the default for ipset. However, this creates a performance problem for large sets when the system spends a lot of time searching through linked lists. To avoid that, we increase the size of the hash table aiming for a fill-factor of 0.75 which should make any lookup fast. This comes at the cost of slightly increased memory usage. See the commit messages for more details. Misc. * The LACNIC parser introduced in the previous release has been fixed and should not be able to parse all IP addresses correctly Thank you to everyone who has contributed to this release. You can find the source here: https://git.ipfire.org/?p=location/libloc.git;a=shortlog;h=refs/tags/0.9.11 https://source.ipfire.org/releases/libloc/libloc-0.9.11.tar.gz Best, -Michael

1 0

[PATCH] location-importer: Fix parsing LACNIC-flavoured inetnums
by Peter Müller 02 Mar '22

02 Mar '22

My fault, again. :-/ Reported-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- src/python/location-importer.in | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src/python/location-importer.in b/src/python/location-importer.in index 83fb5c7..fe13482 100644 --- a/src/python/location-importer.in +++ b/src/python/location-importer.in @@ -3,7 +3,7 @@ # # # libloc - A library to determine the location of someone on the Internet # # # -# Copyright (C) 2020-2021 IPFire Development Team <info(a)ipfire.org> # +# Copyright (C) 2020-2022 IPFire Development Team <info(a)ipfire.org> # # # # This library is free software; you can redistribute it and/or # # modify it under the terms of the GNU Lesser General Public # @@ -691,9 +691,9 @@ class CLI(object): # How many octets do we need to add? # (LACNIC does not seem to have a /8 or greater assigned, so the following should suffice.) - if ldigits == 2: + if ldigits == 1: start_address = start_address[0] + ".0.0/" + start_address[1] - elif ldigits == 3: + elif ldigits == 2: start_address = start_address[0] + ".0/" + start_address[1] else: log.warning("Could not recover IPv4 address from line in LACNIC DB format: %s" % line) -- 2.34.1

2 3

[PATCH] export: Remove prefix when exporting countries.
by Stefan Schantl 24 Feb '22

24 Feb '22

Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- src/python/export.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/python/export.py b/src/python/export.py index a9774e8..be33847 100644 --- a/src/python/export.py +++ b/src/python/export.py @@ -149,7 +149,7 @@ class Exporter(object): directory, prefix=country_code, suffix=self.writer.suffix, family=family, ) - writers[country_code] = self.writer.open(filename, prefix="CC_%s" % country_code) + writers[country_code] = self.writer.open(filename, prefix="%s" % country_code) # Create writers for ASNs for asn in asns: -- 2.30.2

1 0

libloc 0.9.10 released
by Michael Tremer 16 Feb '22

16 Feb '22

Good morning, I just tagged a new version of libloc which includes these changes: * A feed from LACNIC is now being parsed for better data in the South America region * The importer now recognises the new il-central-1 AWS Region and corrects “UK” to “GB” wherever someone go those country codes confused * The exporter will now create files in ipset format which can be reloaded without any further ado. Before, ipset threw an error when the file has already been loaded. We will now flush and reload all data for each country/AS. * libloc is now being packaged for Debian Bookworm * Some development documentation has been added and can be found here: https://man-pages.ipfire.org/libloc/ Thank you to everyone who has contributed to this release. You can find the source here: https://git.ipfire.org/?p=location/libloc.git;a=shortlog;h=refs/tags/0.9.10 https://source.ipfire.org/releases/libloc/libloc-0.9.10.tar.gz Best, -Michael

1 0

[PATCH] location-importer.in: Add country code for AWS's "il-central-1" zone
by Peter Müller 11 Feb '22

11 Feb '22

Reported-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- src/python/location-importer.in | 1 + 1 file changed, 1 insertion(+) diff --git a/src/python/location-importer.in b/src/python/location-importer.in index 118b0de..63f7be5 100644 --- a/src/python/location-importer.in +++ b/src/python/location-importer.in @@ -1228,6 +1228,7 @@ class CLI(object): "eu-south-2": "ES", "eu-west-3": "FR", "eu-north-1": "SE", + "il-central-1": "IL", # XXX: This one is not documented anywhere except for ip-ranges.json itself "me-central-1": "AE", "me-south-1": "BH", "sa-east-1": "BR" -- 2.34.1

2 1

[PATCH] override-other: All prefixes announced by AS27742 are located in NI
by Peter Müller 09 Feb '22

09 Feb '22

Fixes: #12775 Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- overrides/override-other.txt | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/overrides/override-other.txt b/overrides/override-other.txt index dd411dc..0719ae3 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -243,6 +243,11 @@ descr: Leaseweb USA, Inc. remarks: ISP located in US, but some RIR data for announced prefixes contain garbage country: US +aut-num: AS27742 +descr: Amnet Telecomunicaciones S.A. +remarks: ISP located in NI, but some prefixes needs manual correction due to LACNIC DB situation, see also: #12775 +country: NI + aut-num: AS28098 descr: ABGON Comunicaciones remarks: ISP located in CL, but some RIR data for announced prefixes contain garbage (BZ) -- 2.34.1

1 0

location db mismatch
by nusenu 08 Feb '22

08 Feb '22

Hi, I'm trying to understand a difference between the local updated database and the output seen on location.ipfire.org: sha256sum /var/lib/location/database.db fe305bea50c2a916cf9f5c4a1bdee8457ced3033279d7e64598141bb0f1bd607 /var/lib/location/database.db location version Fri, 21 Jan 2022 05:50:50 GMT location:amd64 0.9.9-2 location lookup 89.58.16.0 89.58.16.0: Network : 89.58.16.0/22 Country : Germany Autonomous System : AS197540 - netcup GmbH https://location.ipfire.org/lookup/89.58.16.0 > Network 89.58.16.0/22 > Announced by AS197540 - netcup GmbH > Country Austria https://stat.ripe.net/widget/whois#w.resource=89.58.16.0 > inetnum 89.58.16.0/22 > netname AT-NETCUP-01 > country AT > status ASSIGNED PA > mnt-by NETCUP-MNT > mnt-by NETCUP-MNT > source RIPE I'm wondering if something is broken on my side? kind regards, nusenu -- https://nusenu.github.io

5 11

[PATCH 1/2] override-other: Fix netcup IP ranges actually located in AT
by Peter Müller 05 Feb '22

05 Feb '22

See: https://lists.ipfire.org/pipermail/location/2022-January/000519.html Reported-by: Martin Gebhardt <martin.gebhardt(a)linkspartei.org> Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- overrides/override-other.txt | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/overrides/override-other.txt b/overrides/override-other.txt index b74c1e3..01cd324 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -1518,6 +1518,11 @@ descr: Amarutu Technology Ltd. / KoDDoS / ESecurity remarks: fake offshore location (BZ), traces back to US country: US +net: 89.58.16.0/22 +descr: netcup GmbH +remarks: https://lists.ipfire.org/pipermail/location/2022-January/000519.html +country: AT + net: 91.90.120.0/24 descr: M247 LTD, Greenland Infrastructure remarks: ... traces back to CA @@ -1773,6 +1778,11 @@ descr: Securebit AG remarks: ... who thinks assigning networks to unpopulated Bouvet Island (BV) is funny :-/ country: CH +net: 2a0a:4cc0::/40 +descr: netcup GmbH +remarks: https://lists.ipfire.org/pipermail/location/2022-January/000519.html +country: AT + net: 2a0e:b100:3000::/40 descr: 4b42 UG (haftungsbeschränkt) remarks: ... who thinks assigning networks to unpopulated Bouvet Island (BV) is funny :-/ -- 2.34.1

1 1

2024

2023

2022

2021

2020

2019

2018

2017

Location