GeoIP not working ?

[saintjimmy]

Hello everyone,

I set up geoblocking following the official doc and it "seems" to be working.
I can see my blocking rule matching in the log, the geoip db seems to be updating.
Yet, I got alerts from countries I have blocked that appears in Wordfence alerts ?

[cookiemonster]

you can use the firewall > diagnostics > alias to look up the ip. If is not there, then the maxmind db is perhaps not updated.
If it is there, then it'll be good to see your firewall rule.

[saintjimmy]

One of the IP blocked by Wordfence appears in the alias so I guess the GeoIP DB updating right.

[crazysense]

I'm having the same issue with GeoIP blocking. I followed the rules and everything and I can see I get the loaded categories or what ever it is getting from the Maxmind db, but when I hit apply I'm getting the error in the attached screenshot. There you can see I get the db and it gets filled but there are errors. I'm running the latest version of opnsense.

[Sjakie]

Geoip was working, it's not updating anymore, about after I got a mail from Maxmind about redirection of url's and stuff. In the mean time also updated to OPNsense OPNsense 24.1.3, I didn't check when Geoip stopped working,

[YooDeePee]

I ran into a similar situation with my install (v24.1.6). I was receiving an "error loading alias" when trying to update the Maxmind Geo IP data. It said I had recent geo ip data from the day before and I saw the usual number of about 784K entries according to the GeoIP tab, but any time I tried to pull data from Maxmind, it failed. I even tried creating a new license key but that did not work. I found that when I tried to create a new alias it failed with the same error.

I was able to get it working again by deleting my FW rules containing any GeoIP related Aliases. Then I deleted the aliases related to GeoIP. Next, I went into the GeoIP tab and tried another pull from Maxmind, and this time it worked.

I went back and recreated my aliases and rules, and I now see blocks showing up in my live firewall logs.

Def not an elegant solution to the problem, but it worked.

[bsindia]

I am in the process of configuring MGeoIP on my Opnsense. I am having trouble finding the correct down URL which is required as a part of the GeoIP settings.I have an account with Maxmind but just need to know where/how to find the proper URL (Maxmind) to be used for Geo updates. I appreciate your assistance. Thx

[cookiemonster]

It is the one you navigate to when you're logged in to Maxmind's site. You can use the GeoLite2-Country-CSV type.

[bsindia]

I fixed the issue mention by increasing the permitted firewall table size. I would still like to know how to properly update the GeoIP databases from MaxMind. Thanks

[bsindia]

Issues appears to be resolved. I am now receiving updates from Maxminbd. My only concern is that the IP range count has not changed. I will continue to monitor.