your thoughts on a particualar ipfw action.

Julian Elischer julian at freebsd.org
Fri Aug 12 04:57:07 UTC 2016


On 11/08/2016 9:02 AM, Dr. Rolf Jansen wrote:
>> Am 08.08.2016 um 18:46 schrieb Dr. Rolf Jansen <rj at obsigna.com>:
>>
>> I am almost finished with preparing the tools for geo-blocking and geo-routing at the firewall for submission to the FreeBSD ports.
>>
>> I created a man file for the tools, see: https://cyclaero.github.io/ipdb/, and I added the recent suggestions on rule number/action code per country code, namely, I changed the formula for the x-flag to the suggestion of Ian (value = offset + ((C1 - 'A')*26 + (C2 - 'A'))*10), and I added the idea of directly assigning a number to a country code in the argument for the t-flag ("CC=nnnnn:...").
>>
>> Furthermore, I removed the divert filter daemon from the Makefile. The source is still on GitHub, though, and can be re-vamped if necessary.
>>
>> Now I am going to prepare the Makefile for the port.
> I just submitted a PR asking to add the new port 'sysutils/ipdbtools'.
>
>     https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=211744
>
> I needed to change the name of the geoip tool, because GeoIP® is a registered trademark of MaxMind, Inc., see www.maxmind.com. The name of the tool is now 'ipup' = abbreviated form of  IP  geo location table generation and look- UP , that is without the boring middle part :-D
Hmm I'd have gone for geotable. ipup sounds like a young dog produced 
by Apple.
(wonder if one can change the name of a port)

>
> Those, who used geoip already in some scripts, please excuse the inconvenience of needing to change the name.
>
> With the great help of Julian, I was able to improve the man file and the latest version can be read online:
>
>     https://cyclaero.github.io/ipdb/
>
> Best regards
>
> Rolf
>
> _______________________________________________
> freebsd-ipfw at freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
> To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe at freebsd.org"
>
>



More information about the freebsd-ipfw mailing list