- 17 Nov, 2020 3 commits
-
-
Michael Tremer authored
Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
Michael Tremer authored
Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
Michael Tremer authored
Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
- 16 Nov, 2020 3 commits
-
-
Michael Tremer authored
Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
Michael Tremer authored
Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
Michael Tremer authored
This will allow us to speed up the export of the database if only a few countries should be returned. Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
- 15 Nov, 2020 1 commit
-
-
Michael Tremer authored
Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
- 13 Nov, 2020 6 commits
-
-
Michael Tremer authored
Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
Michael Tremer authored
These should not be exported Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
Michael Tremer authored
Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
Michael Tremer authored
Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
Michael Tremer authored
Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
Michael Tremer authored
Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
- 12 Nov, 2020 15 commits
-
-
Michael Tremer authored
Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
Michael Tremer authored
Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
Michael Tremer authored
Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
Michael Tremer authored
Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
Michael Tremer authored
The old one is too difficult to use in terms of order of input parameters and return value. Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
Michael Tremer authored
Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
Michael Tremer authored
Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
Michael Tremer authored
Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
Michael Tremer authored
Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
Michael Tremer authored
Networks that are in the list won't be added again Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
Michael Tremer authored
Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
Michael Tremer authored
Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
Michael Tremer authored
Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
Michael Tremer authored
Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
Michael Tremer authored
Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
- 11 Nov, 2020 2 commits
-
-
Michael Tremer authored
Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
Michael Tremer authored
Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
- 06 Nov, 2020 1 commit
-
-
Peter Müller authored
Fixes: #12523 Signed-off-by:
Peter Müller <peter.mueller@ipfire.org> Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
- 29 Oct, 2020 2 commits
-
-
Peter Müller authored
Signed-off-by:
Peter Müller <peter.mueller@ipfire.org>
-
Peter Müller authored
This caused that the timestamp in DNS was misinterpreted as local time and often, databases could not be downloaded. Signed-off-by:
Peter Müller <peter.mueller@ipfire.org>
-
- 28 Oct, 2020 1 commit
-
-
Michael Tremer authored
The database is now being opened before the requested method is called and handle_verify() wasn't updated. Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
- 27 Oct, 2020 6 commits
-
-
Michael Tremer authored
This patch removes the possibility that any IP address ranges might show up in multiple exported files. If this was content from the database: * 10.0.0.0/16 - DE * 10.0.1.0/24 - FR Then the IP address 10.0.1.1 would match for both countries. The algorithm will now break the larger /16 subnet apart into smaller subnets so that 10.0.1.0/24 is no longer overlapped. There was some time spent on this to make this as efficient as possible. Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
Peter Müller authored
Signed-off-by:
Peter Müller <peter.mueller@ipfire.org> Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
Peter Müller authored
Some RIRs include detailled information regarding networks not managed by or allocated to themselves, particually APNIC. We need to filter those networks (they usually have a characteristic network name) in order to prevent operational quirks or returning wrong country codes. Fixes: #12501 Partially fixes: #12499 Cc: Michael Tremer <michael.tremer@ipfire.org> Signed-off-by:
Peter Müller <peter.mueller@ipfire.org> Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
Peter Müller authored
Signed-off-by:
Peter Müller <peter.mueller@ipfire.org> Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
Peter Müller authored
Sanity checks for parsed networks have been put into a separate function to avoid boilerplate code for extended sources. This makes the location database less vulnerable to garbage written into RIR databases on purpose or by chance. Fixes: #12500 Signed-off-by:
Peter Müller <peter.mueller@ipfire.org> Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-
Peter Müller authored
In contrast to the location database itself, the xt_geoip module consumes a list of IP networks for each country, and returns after the first match. We therefore need to... (a) sort IP networks by their size, allow as precise matches as possible (b) export _any_ IP networks - including inverted subnets - to prevent undefined overlaps (c) do the entire thing as fast as possible, consuming as less disk space as possible, which is why we can't just iterate over all /24 chunks Partially fixes: #12499 Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org> Signed-off-by:
Peter Müller <peter.mueller@ipfire.org> Signed-off-by:
Michael Tremer <michael.tremer@ipfire.org>
-