- 13 Nov, 2020 6 commits
-
-
Michael Tremer authored
Signed-off-by:Michael Tremer <michael.tremer@ipfire.org>
-
Michael Tremer authored
These should not be exported Signed-off-by: -
Michael Tremer authored
Signed-off-by: -
Michael Tremer authored
Signed-off-by: -
Michael Tremer authored
Signed-off-by: -
Michael Tremer authored
Signed-off-by:
-
- 12 Nov, 2020 15 commits
-
-
Michael Tremer authored
Signed-off-by: -
Michael Tremer authored
Signed-off-by: -
Michael Tremer authored
Signed-off-by: -
Michael Tremer authored
Signed-off-by: -
Michael Tremer authored
The old one is too difficult to use in terms of order of input parameters and return value. Signed-off-by: -
Michael Tremer authored
Signed-off-by: -
Michael Tremer authored
Signed-off-by: -
Michael Tremer authored
Signed-off-by: -
Michael Tremer authored
Signed-off-by: -
Michael Tremer authored
Networks that are in the list won't be added again Signed-off-by: -
Michael Tremer authored
Signed-off-by: -
Michael Tremer authored
Signed-off-by: -
Michael Tremer authored
Signed-off-by: -
Michael Tremer authored
Signed-off-by: -
Michael Tremer authored
Signed-off-by:
-
- 11 Nov, 2020 2 commits
-
-
Michael Tremer authored
Signed-off-by: -
Michael Tremer authored
Signed-off-by:
-
- 06 Nov, 2020 1 commit
-
-
Peter Müller authored
Fixes: #12523 Signed-off-by:
Peter Müller <peter.mueller@ipfire.org> Signed-off-by:
-
- 29 Oct, 2020 2 commits
-
-
Peter Müller authored
Signed-off-by: -
Peter Müller authored
This caused that the timestamp in DNS was misinterpreted as local time and often, databases could not be downloaded. Signed-off-by:
-
- 28 Oct, 2020 1 commit
-
-
Michael Tremer authored
The database is now being opened before the requested method is called and handle_verify() wasn't updated. Signed-off-by:
-
- 27 Oct, 2020 8 commits
-
-
Michael Tremer authored
This patch removes the possibility that any IP address ranges might show up in multiple exported files. If this was content from the database: * 10.0.0.0/16 - DE * 10.0.1.0/24 - FR Then the IP address 10.0.1.1 would match for both countries. The algorithm will now break the larger /16 subnet apart into smaller subnets so that 10.0.1.0/24 is no longer overlapped. There was some time spent on this to make this as efficient as possible. Signed-off-by: -
Peter Müller authored
Signed-off-by:
-
Peter Müller authored
Some RIRs include detailled information regarding networks not managed by or allocated to themselves, particually APNIC. We need to filter those networks (they usually have a characteristic network name) in order to prevent operational quirks or returning wrong country codes. Fixes: #12501 Partially fixes: #12499 Cc: Michael Tremer <michael.tremer@ipfire.org> Signed-off-by:
-
Peter Müller authored
Signed-off-by:
-
Peter Müller authored
Sanity checks for parsed networks have been put into a separate function to avoid boilerplate code for extended sources. This makes the location database less vulnerable to garbage written into RIR databases on purpose or by chance. Fixes: #12500 Signed-off-by:
-
Peter Müller authored
In contrast to the location database itself, the xt_geoip module consumes a list of IP networks for each country, and returns after the first match. We therefore need to... (a) sort IP networks by their size, allow as precise matches as possible (b) export _any_ IP networks - including inverted subnets - to prevent undefined overlaps (c) do the entire thing as fast as possible, consuming as less disk space as possible, which is why we can't just iterate over all /24 chunks Partially fixes: #12499 Signed-off-by: -
Peter Müller authored
This reverts commit 13f67f28. Signed-off-by:
-
Peter Müller authored
This reverts commit 44341478. Signed-off-by:
-
- 22 Oct, 2020 1 commit
-
-
Michael Tremer authored
Signed-off-by:
-
- 21 Oct, 2020 4 commits
-
-
Michael Tremer authored
There are no functional changes, this just runs quicker now. Signed-off-by: -
Michael Tremer authored
Signed-off-by: -
Michael Tremer authored
Signed-off-by: -
Michael Tremer authored
Signed-off-by:
-
