your thoughts on a particualar ipfw action.

Dr. Rolf Jansen rj at obsigna.com
Thu Aug 11 01:02:34 UTC 2016


> Am 08.08.2016 um 18:46 schrieb Dr. Rolf Jansen <rj at obsigna.com>:
> 
> I am almost finished with preparing the tools for geo-blocking and geo-routing at the firewall for submission to the FreeBSD ports.
> 
> I created a man file for the tools, see: https://cyclaero.github.io/ipdb/, and I added the recent suggestions on rule number/action code per country code, namely, I changed the formula for the x-flag to the suggestion of Ian (value = offset + ((C1 - 'A')*26 + (C2 - 'A'))*10), and I added the idea of directly assigning a number to a country code in the argument for the t-flag ("CC=nnnnn:...").
> 
> Furthermore, I removed the divert filter daemon from the Makefile. The source is still on GitHub, though, and can be re-vamped if necessary.
> 
> Now I am going to prepare the Makefile for the port.

I just submitted a PR asking to add the new port 'sysutils/ipdbtools'.

   https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=211744

I needed to change the name of the geoip tool, because GeoIP® is a registered trademark of MaxMind, Inc., see www.maxmind.com. The name of the tool is now 'ipup' = abbreviated form of  IP  geo location table generation and look- UP , that is without the boring middle part :-D

Those, who used geoip already in some scripts, please excuse the inconvenience of needing to change the name.

With the great help of Julian, I was able to improve the man file and the latest version can be read online:

   https://cyclaero.github.io/ipdb/

Best regards

Rolf



More information about the freebsd-ipfw mailing list