Hi,
Yes, I can confirm this. The subnets returned are not unique.
-Michael
On 22 Nov 2020, at 11:59, Peter Müller peter.mueller@ipfire.org wrote:
Hello *,
I just stumbled across a strange issue on my testing machine strongly reminding me of a problem with the xt_geoip module if we printed the location database contents non-planar:
For debugging and monitoring reasons, a NRPE job pinging ping.ipfire.org (which resolves to 81.3.27.38) is executed periodically. Since a few hours, this job fails due to ICMP packets to this IP address being dropped by the outgoing firewall engine.
Its policy is set to "drop", with a rule allowing ICMP traffic to DE. While "location lookup 81.3.27.38" correctly returns DE for the prefix 31.8.0.0/18, it seems as the xt_geoip module did not get that and misclassifies this IP address.
Is somebody able to verify or falsify this issue on Core Development Build 153?
Thanks, and best regards, Peter Müller