[Solved]How to choose EU or Europe for GeoIP?

Started by Taomyn, September 27, 2022, 07:22:14 PM

Previous topic - Next topic
September 27, 2022, 07:22:14 PM Last Edit: November 07, 2022, 08:51:04 AM by Taomyn
Hi,


I've been trying to figure why some external connections, in this case from Google, are being blocked when their IP is, or so I thought according to my usual whois look-ups in the US but the USA is in my list of allowed countries.


I then looked up the same IP at Maxmind, where I get my GeoIP data and they don't have it as a US IP but as one from Europe and US, but not a specific country in Europe.


This is the address block of the IP:




network,geoname_id,registered_country_geoname_id,represented_country_geoname_id,is_anonymous_proxy,is_satellite_provider

66.249.81.0/25,6255148,6252001,,0,0



According to the country lookup in the file from Maxmind that's:


6255148,en,EU,Europe,,,0

6252001,en,NA,"North America",US,"United States",0


See the attached for what their website returns


So how do set this in the firewall alias, as there's no EU or Europe as a single choice other than all the separate countries? Is there any way to debug/test the GeoIP check from the GUI or the console? I'd like to see how the firewall is interpreting the location it looks up.

Anyone?


I tried reversing the alias i.e. listing all the countries to block but that made it an enormous entry which I didn't think was a good idea - even my allowed countries, which is about 15 entries I thought was quite big.