Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    ASN reporting accuracy

    Scheduled Pinned Locked Moved pfBlockerNG
    3 Posts 2 Posters 840 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      michmoor LAYER 8 Rebel Alliance
      last edited by michmoor

      How accurate is the reporting of IPs to ASNs? I am seeing blocks from ASN6 and 7 which according to the ARIN registry are registered in America or UK but pfblocker is labeling them as Russian or China.

      example of IPs
      45.145.66.165
      92.63.196.25
      193.3.19.167

      As an aside, I do appreciate the alert search. I recently had to check if there were any Russian IPs going out or coming inbound and searching by GeoIP (RU) worked out great.

      Firewall: NetGate,Palo Alto-VM,Juniper SRX
      Routing: Juniper, Arista, Cisco
      Switching: Juniper, Arista, Cisco
      Wireless: Unifi, Aruba IAP
      JNCIP,CCNP Enterprise

      M 1 Reply Last reply Reply Quote 0
      • M
        michmoor LAYER 8 Rebel Alliance @michmoor
        last edited by

        @michmoor I know this will most likely get no response but there is an issue with the way the package reports the ASN. My screenshot shows that it gets the location correct but the ASNs are all the same.
        593bceec-de64-43fe-9a97-80c9622d1650-image.png

        93a125a4-e7c0-4e7e-99eb-6835fabc3c6b-image.png

        Firewall: NetGate,Palo Alto-VM,Juniper SRX
        Routing: Juniper, Arista, Cisco
        Switching: Juniper, Arista, Cisco
        Wireless: Unifi, Aruba IAP
        JNCIP,CCNP Enterprise

        1 Reply Last reply Reply Quote 0
        • P
          parry
          last edited by

          While using pfsense 2.4.5.1 pfblockerng allowed the selection of AS Numbers. But that has disappeared in the 2.1.4_26 version supported by pfsense 2.5.2. Can anyone advise what happened or how I can block a site by ASN

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.