GEOIP stopt working

[chemlud]

yeppp, as pointed out some hours ago in this thread ;-)

[repa]

but still doesn't work for me.

Manuel download works, on OPNsense i still get the popup and nothing happens.

[repa]

is it possible to force / debug the download somehow?

[k0ns0l3]

had the same problem try the other only id (X)


https://download.maxmind.com/app/geoip_download?edition_id=GeoLite2-Country-CSV&license_key=XXXXXX&suffix=zip


greeting k0ns0l3  ;)

[gpb]

I had the word license misspelled due to a c/p error...note there are a few records written to the log when it fails:

sshd[41635]: error: kex_exchange_identification: Connection closed by remote host

Corrected it and now I'm still waiting (90 mins) for it to try again.  A schedule would be handy, or even knowledge of what the default is...perhaps that's documented but I haven't seen it.  Also...I'm assuming this data is centralized for ntopng to use as well?

Thanks to the devs for getting this put in!  :)

EDIT: Not sure the sshd message is from the GeoIP changes as it occurs every two hours.

EDIT 2: sshd messages are from ntopng network discovery.  Also, the GeoIP files are not installed for ntopng...so that's still a manual process after each update, as far as I can tell.

[chemlud]

I'm waiting for a second install to update the Alias, maybe it get's updated only once a day? Who knows... maybe the documentation...

[dcol]

Mine finally updated after 2 hours. That somehow doesn't seem right. At least the devs should put that info in the notice that comes up.

[franco]

Sorry to burst this bubble, but you are all aware that you're being rather unreasonable?

https://twitter.com/opnsense/status/1215380392406069248

[Taomyn]

I have asked for this and the other irrelevant responses to be removed.

[franco]

Frankly, I don't see your point.

If we agree that this is as much your software as everybody else's the trend of "my problem, but not enough of my problem to do something about it but complain a bit" is not helpful.

Meanwhile people update docs, write patches, test and give it enough time to work out.

[franco]

Maybe I wasn't clear so I will reiterate:

We make a conscious choice to not complain about the upstream handling, providing patches and appreciate the help we've gotten to be able to ship this feature relatively quickly.

In turn, it would be nice to have users not complain about technical difficulties directed at us that are out of patch scope or can always be fixed later.

It's just a feature that should be preserved, not the end of the world if this can't be achieved in a day.


Cheers,
Franco

[dcol]

It is a brand new feature and it didn't work when it was used and we reported it. My suggestion of putting a note in the message was so others wouldn't also think it was an issue. The message looks like something went wrong.

[dcol]

The GeoIP function does not seem to be working. There are no log entries and I use to see a ton of them before the change. Everything looks ok in the GeoIP Settings. Yes, the rule is set to log hits

Is there something I am missing or something else I need to do?
I have the rule set to block all countries except US with an invert. Same rule as before the change. Never get a hit on it and that's just not possible.

Attached is what my floating rule looks like. Please advise if this rule is wrong

[agrumpyhermit]

I can't get it working and unfortunately I don't know what to provide to help figure out the cause. I used the link in my browser and the file downloaded immediately. I've been trying in the GeopIP settings tab for about 14 hours (waiting overnight since I knew some had delays) and still nothing.

[chemlud]

Did you try to delete the Alias and create a new one? I didn't need to do this, but apparently my Geoblock works. However I don't use invert, but floating (actually 2, one with GeoIP as source and one with destination)...