Messages

Are you using the same hardware?

Noting that my other Ryzen based firewalls had no problems with the same upgrade.

OK. Now resolved. The problem was caused by the rebuild order.

I did the initial rebuild from a fresh download of the installation sources. Restored the config, then applied updates.

Doing the rebuild, then applying the updates, then restoring the backup works.

And it is working fine for the other firewalls that I already upgraded to 25.7.11

But I won't be doing the rest until I have this one working.

Did I miss some changes between 25.7.10 and 25.7.11?

The restored config was running as expected on 25.7.10.

Maybe, but the current dataset was reported to have downloaded.

For both datasets the expected number of ranges are shown in the GeoIP settings tab.

Thanks Patrick

I had created a new GeoIP alias. Which triggered the download of the respective GeoIP data.

I had also tried editing and saving all the original aliases.

Following a 25.7.11 build and config restoration I'm not seeing any of my rules trigger that use GeoIP aliases.

I originally thought it might be an issue with the IPinfo feed but I see the same behavior when I use the Maxmind data.

Both sources report the expected number of number ranges:

Maxmind

Last updated 2026-01-16T09:38:04    
Total number of ranges    1255047



IPinfo

Last updated 2026-01-17T17:26:22.321535    
Total number of ranges 4464742


Any ideas?

I updated a firewall from 25.7.10 yesterday only to find the firewall would no longer boot.

Rebuilding from scratch to 25.7.11_1 and then re-installing plugins led to the same result.

Rebuilding and iterating through the plugins led to os-cpu-microcode-amd being the cause.

The hardware is a Minisforum Ryzen 9 9955HX MS-A2.

Apart from the one firewall mentioned, all the other firewalls have now updated today without issue.

I'm using unique tokens on all firewalls.

I'm deducing that the maximum download exceeded is due to the firewall making multiple attempts to download the file, which matches the logs.

If I use curl to download the file from another location I see ?token=f2cbc8898bc30a appended to the filename.

I'm also seeing:

In order to use GeoIP, you need to configure a source in the GeoIP settings tab

When I go into the Firewall: Aliases

I'm seeing the same thing. From the timings this is before I updated to 25.7.9 from 25.7.8

Relevant logs from one of my firewalls.

[...]
2025-12-05T11:42:13    Notice    firewall    geoip updated (files: 0 lines: 0)
2025-12-05T11:42:13    Error    firewall    geoip update failed : You have reached your 10 downloads per day limit for ipinfo_lite.csv.gz from [ip.ad.dr.ess] Please reach out to increase your limit via support@ipinfo.io. [http_code: 429]
2025-12-05T11:42:13    Notice    firewall    geoip updated (files: 0 lines: 0)
[...]
2025-12-05T11:42:01    Error    firewall    geoip update failed : File is not a zip file
2025-12-04T11:46:03    Notice    firewall    geoip updated (files: 0 lines: 0)
2025-12-04T11:46:03    Error    firewall    geoip update failed : You have reached your 10 downloads per day limit for ipinfo_lite.csv.gz from [ip.ad.dr.ess]. Please reach out to increase your limit via support@ipinfo.io. [http_code: 429]
[...]
2025-12-04T11:41:04    Error    firewall    geoip update failed : File is not a zip file
2025-12-04T11:41:03    Notice    firewall    geoip updated (files: 0 lines: 0)
2025-12-04T11:41:03    Error    firewall    geoip update failed : File is not a zip file
2025-12-04T11:41:01    Notice    firewall    geoip updated (files: 0 lines: 0)
2025-12-04T11:41:01    Error    firewall    geoip update failed : File is not a zip file
2025-12-03T11:40:08    Notice    firewall    geoip updated (files: 496 lines: 5785121)
2025-12-02T11:39:06    Notice    firewall    geoip updated (files: 496 lines: 4954678)
2025-12-01T11:38:05    Notice    firewall    geoip updated (files: 496 lines: 4951034)
[...]

This may be a usable workaround for some.

Having registered an account with IPinfo, entered and saved the URL.

Create a new GeoIP alias. When saving this you should the IPinfo DB downloaded.

When I upgraded a firewall to 25.7.5 I also migrated from Maxmind to IPinfo. It was about 14 hours before I saw the IPinfo data downloaded and it has updated daily since. During the transition I did not notice any issues with GeoIP based rules (which is not to say that there were none).

Yesterday I migrated this firewall to newer hardware. All looked OK when I put it online, but there was no GeoIP data. This lead to the GeoIP rules not being applied and as a result I rolled back to the old hardware.

As noted it would be useful to be able to request a download of the data.

If you map the instruction in the original Draytek link (https://www.draytek.co.uk/support/guides/kb-isp-talktalk#vigor-vdsl2-modems) across to the fields given in section 2 of the device manual https://www.draytek.com/assets/online_manuals/pdf/DrayTek_UG_Vigor167_V1.4.pdf

I think you will be able to do what you are looking for.

Where a picture has been configured, would you consider adding the ability to display it on the Login screen?