Hi,
I've been trying to figure why some external connections, in this case from Google, are being blocked when their IP is, or so I thought according to my usual whois look-ups in the US but the USA is in my list of allowed countries.
I then looked up the same IP at Maxmind, where I get my GeoIP data and they don't have it as a US IP but as one from Europe and US, but not a specific country in Europe.
This is the address block of the IP:
network,geoname_id,registered_country_geoname_id,represented_country_geoname_id,is_anonymous_proxy,is_satellite_provider
66.249.81.0/25,6255148,6252001,,0,0
According to the country lookup in the file from Maxmind that's:
6255148,en,EU,Europe,,,0
6252001,en,NA,"North America",US,"United States",0
See the attached for what their website returns
So how do set this in the firewall alias, as there's no EU or Europe as a single choice other than all the separate countries? Is there any way to debug/test the GeoIP check from the GUI or the console? I'd like to see how the firewall is interpreting the location it looks up.
Anyone?
I tried reversing the alias i.e. listing all the countries to block but that made it an enormous entry which I didn't think was a good idea - even my allowed countries, which is about 15 entries I thought was quite big.
Fixed in 22.7.7