Find IP Address being blocked in feeds
-
Hello Everyone,
I am seeing that the canonical update server IP's are being blocked by pfblocker:
Mar 9 08:16:25,1770005485,igb1.10,HOME_VLAN,block,4,6,TCP-S,192.168.10.119,91.189.95.83,42558,80,out,GB,pfB_Top_v4,91.189.80.0/20,pfB_Top_v4,haetae.canonical.com,Unknown,null,+ Mar 9 08:16:25,1770005485,igb1.10,HOME_VLAN,block,4,6,TCP-S,192.168.10.119,91.189.91.26,59058,80,out,US,pfB_Top_v4,91.189.80.0/20,pfB_Top_v4,hanger.canonical.com,Unknown,null,+pfB_Top_v4 is an alias but I cannot find the IP subnet in the source feeds. In the meantime to get things I have created an IP white list allowing that subnet 91.189.80/20
https://mxtoolbox.com/SuperTool.aspx?action=arin%3a91.189.91.26&run=toolpage
Any ideas on how to hunt down that IP in pfblockerng?
-
Spent more time reviewing the changes I made. If I am not mistaken the pfB_Top_v4 alias is made by enabling GeoIP blocking (any of the lists there). In my case I enabled Top Spammers list and with action 'deny outbound'.
After disabling 'GeoIP Top Spammers' the ubuntu updates began working.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.