Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    pfBlockerNG - why is Luxembourg IP in pfB_NAmerica_v4?

    Scheduled Pinned Locked Moved pfBlockerNG
    26 Posts 4 Posters 2.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator
      last edited by johnpoz

      @jwj said in pfBlockerNG - why is Luxembourg IP in pfB_NAmerica_v4?:

      54.222.63.5

      That is this
      Amazon EC2 BJS Prefix

      So its not actual AWS ;)

      dl.amazon.cn points to it for example..

      Your not anywhere near china are you? Curious why you would be going there to be honest..

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      1 Reply Last reply Reply Quote 0
      • ?
        A Former User
        last edited by A Former User

        Wonder what it's after from that? Profile data? It's the problem with encrypting EVERYTHING. If it's not personally identifying why is it encrypted? Can't sniff to see what it is...

        1 Reply Last reply Reply Quote 0
        • ?
          A Former User
          last edited by

          No, North Carolina. Used to live in the region. Hong Kong a long time ago, before there was Amazon. Malaysia, Singapore, Thailand and Indonesia more recently. Singapore until 2016 most recently.

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by johnpoz

            Just looked in my dns logs, and yeah my IPAD is looking that up...

            That 218 IP is
            www.amazon.cn. 1833 IN A 54.222.60.218

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • ?
              A Former User
              last edited by

              Curious. Some jurisdictional thing? Maybe they have just F'd up their load balancing.

              1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator
                last edited by

                All comes down to how far you want to go down the tinfoil hat hole ;)

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                ? 1 Reply Last reply Reply Quote 0
                • ?
                  A Former User @johnpoz
                  last edited by

                  @johnpoz Come on now. This is a serious time, pandemic and all. There is no time for humor ☺

                  I have no interest in chasing rabbits. :) Thanks man, be well!

                  1 Reply Last reply Reply Quote 0
                  • Bob.DigB
                    Bob.Dig LAYER 8 @A Former User
                    last edited by Bob.Dig

                    @jwj said in pfBlockerNG - why is Luxembourg IP in pfB_NAmerica_v4?:

                    You will need to whitelist what you need to, Maxmind isn't going to fix their free offering.

                    Problem is, you can't mix them right? So for an alias-permit, there is no good solution to add some IPs to a geo-range or is there and if how? I guess you have to create your own URL-Alias somehow.

                    1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator
                      last edited by

                      you can create your own and combine lists if you want.. i have this list for example

                      list.jpg

                      has some geo regions and then list of aws ips that are used to check plex is up, this changes now and then.. And then a list from status cake that is used to test if services up, etc.

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      Bob.DigB 1 Reply Last reply Reply Quote 0
                      • Bob.DigB
                        Bob.Dig LAYER 8 @johnpoz
                        last edited by

                        @johnpoz So If I want do add some IPs my own, how would I do that, create or copy a text file to pfsense and make a "URL" or can I add some host aliases my own?

                        1 Reply Last reply Reply Quote 0
                        • johnpozJ
                          johnpoz LAYER 8 Global Moderator
                          last edited by johnpoz

                          Scroll down. You can do full custom.

                          custom.jpg

                          But sure you could use a file or url that loads the file..

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                          Bob.DigB 1 Reply Last reply Reply Quote 1
                          • Bob.DigB
                            Bob.Dig LAYER 8 @johnpoz
                            last edited by

                            @johnpoz Interesting, will try that. Thank you.

                            Bob.DigB 1 Reply Last reply Reply Quote 0
                            • Bob.DigB
                              Bob.Dig LAYER 8 @Bob.Dig
                              last edited by Bob.Dig

                              I had to "recreate" my geo-IP alias for that, because I was not able to combine the existing one with the custom IP. But it works!
                              👍

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.