https://github.com/opnsense/core/issues/7779#issuecomment-3156278832 (https://github.com/opnsense/core/issues/7779#issuecomment-3156278832)
Patching file opnsense/scripts/filter/lib/alias/geoip.py using Plan A...
Hunk #1 succeeded at 23.
Hunk #2 succeeded at 34.
Hunk #3 succeeded at 44.
Hunk #4 succeeded at 157.
done
All patches have been applied successfully. Have a nice day.
opnsense version 25.7.4
opnsense-geoip.png
error
In order to use GeoIP, you need to configure a source in the GeoIP settings tab
The error still occurs even when I change it to the MaxMind URL.
I work for IPinfo, but I am not an expert in Opnsense. I am just leaving this comment here in case there is an issue with our data that we need to investigate from our end.
I thought that the only service usable for this was Maxmind. I don't see ipinfo mentioned here https://docs.opnsense.org/manual/aliases.html#geoip
It's a feature request and an experimental patch that might make it into one of the next releases.
Quote from: Patrick M. Hausen on October 06, 2025, 09:19:57 PMIt's a feature request and an experimental patch that might make it into one of the next releases.
I've confirmed that it's on the v26.1 roadmap.
Does this mean it's impossible even with
opnsense-patch? Does the next release mean 25.7.x, or 26.1?
You can get it with opnsense-patch now or most probably with 26.1.
It will get a final QA round today and released tomorrow in 25.7.5. Note there's more than one patch to opnsense-patch. Haven't heard of any issues yet...
Cheers,
Franco
Quote from: Patrick M. Hausen on October 07, 2025, 08:32:27 AMYou can get it with opnsense-patch now or most probably with 26.1.
Just as in the content of the post, I am reporting that `opnsense-patch` completed successfully, but an error is still occurring.
I would suggest to use the FULL cherry pick instead of a single commit from master...
# opnsense-patch https://github.com/opnsense/core/commit/fe20dfd71514
As I said this is still being tested and that's why it wasn't released and that issues that still exist can likely be fixed before release.
Cheers,
Franco
BTW, as long as "Total number of ranges" is 0 that popup will show regardless of the URL was filled out correctly or not. The database has to be successfully loaded too.
Cheers,
Franco
as a opnsense business licensed user. which is the better option
the included Opnsense updates to the geoip data.
or using the new ipinfolite?
or is the Business edition pulling data from them now?
edit. after reading the thread in the first post. ill keep using the version included in business edition
The business edition will move to a builtin IPInfo database in 25.10.1. We want to introduce the new feature (or at least table entry scaling) in 25.10 before switching people over.
Cheers,
Franco
I updated to 25.7.5 at the weekend and today wanted to try out IPInfo. I followed the directions from the release notes, I signed up and replaced the MaxMind URL with the new one from my account but so far I see no change or any error. How can I check the status and maybe force an update? I did check the new URL manually through my browser and the file does download.
If your numbers look like this you're on the right database:
Last updated: 2025-10-12T14:22:04.775778
Total number of ranges: 4589299
Nope, they are still the same as the last run against the old MaxMind URL
I've tried making a change to a rule on my WAN connection and that didn't cause an update, and checking some log files doesn't show anything but I'm not sure where to be looking.
Last updated 2025-10-10T10:06:14
Total number of ranges 1298663
Yep, pretty sure that's the maxmind one. Make sure the URL works, maybe it's not allowed to fetch.
I tried using curl from the OPNsense shell but I couldn't figure out how to get it to follow the redirect as I got that as the result - it did also needed quotes around the URL to take care of the ? character before the token:
Found. Redirecting to https://dl.ipinfo.io/artifacts/v1/ipinfo_lite.csv.gz?gener<redacted>
But doing the same on my Fedora server, but using wget, the file comes down correctly.
I am using
https://ipinfo.io/data/ipinfo_lite.csv.gz?token=<mytoken>
which seems to work.
Not working for me either
OPNsense 25.7.5-amd64
Went to Firewall:Aliases and entered
https://ipinfo.io/data/ipinfo_lite.csv.gz?token=<mytoken>
Pressed Apply
Rebooted
Waited 5 hours
Last update shows "2025-07-04T10:30:40" - same as Maximind previously
Total ranges: 1282050 - same as Maximind
I downloaded the 25 meg CSV file from ipinfo and it shows expected data.
Thanks.
Check System: Log Files: Backend for clues...
Cheers,
Franco
Mine is working, and im using the same type of Link as Patrick. There isnt much to see in the logs, but if its working (as mine is) you will see, once per day:
2025-10-13T07:39:12-07:00 Notice firewall geoip updated (files: 496 lines: 4550698)
vs, from the maxmind:
2025-10-08T07:34:02-07:00 Notice firewall geoip updated (files: 502 lines: 1294241)
Checked again this morning and it eventually worked
Last updated 2025-10-13T22:15:01.504926
Total number of ranges 4550698
So for me, the lack of an "update now" feature hampers any simple diagnosis - perhaps something for the feature list?
Quote from: Bluewind on October 13, 2025, 06:22:32 PMNot working for me either
OPNsense 25.7.5-amd64
Went to Firewall:Aliases and entered
https://ipinfo.io/data/ipinfo_lite.csv.gz?token=<mytoken>
Pressed Apply
Rebooted
Waited 5 hours
Last update shows "2025-07-04T10:30:40" - same as Maximind previously
Total ranges: 1282050 - same as Maximind
I downloaded the 25 meg CSV file from ipinfo and it shows expected data.
Thanks.
Same here. I've been waiting for 3d - went back to maxmind in the meantime where it's working as expected.
Quote from: Taomyn on October 14, 2025, 06:13:39 AMSo for me, the lack of an "update now" feature hampers any simple diagnosis - perhaps something for the feature list?
Ticket sounds good, even just to dig into the specifics.
Cheers,
Franco
When I upgraded a firewall to 25.7.5 I also migrated from Maxmind to IPinfo. It was about 14 hours before I saw the IPinfo data downloaded and it has updated daily since. During the transition I did not notice any issues with GeoIP based rules (which is not to say that there were none).
Yesterday I migrated this firewall to newer hardware. All looked OK when I put it online, but there was no GeoIP data. This lead to the GeoIP rules not being applied and as a result I rolled back to the old hardware.
As noted it would be useful to be able to request a download of the data.
Quote from: franco on October 14, 2025, 06:46:31 PMTicket sounds good, even just to dig into the specifics.
Cheers,
Franco
Done https://github.com/opnsense/core/issues/9290
This may be a usable workaround for some.
Having registered an account with IPinfo, entered and saved the URL.
Create a new GeoIP alias. When saving this you should the IPinfo DB downloaded.