Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Israëli IP in European filter

    Scheduled Pinned Locked Moved pfBlockerNG
    4 Posts 3 Posters 488 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      cyrcocq
      last edited by cyrcocq

      Hi,
      One of our client is in Israël. His ip 185.175.11.191 from israelinternet.co.il is unable to connect until we exclude the European filter... In witch we can't find Israël...

      What the matter?
      What country from European Database should we exclude to allow it's connections?

      Thanks.

      GertjanG 1 Reply Last reply Reply Quote 0
      • GertjanG
        Gertjan @cyrcocq
        last edited by

        @cyrcocq said in Israëli IP in European filter:

        What country from European Database should we exclude to allow it's connections?

        Be aware : ISPs never stop selling huge blocks of IPv4 to each other. They are worth the price of gold these days.

        If you want to geo block, be ready to keep your admin connection open, and change things "on the fly".
        If it's just an IP (small range) you could white list I guess.

        No "help me" PM's please. Use the forum, the community will thank you.
        Edit : and where are the logs ??

        1 Reply Last reply Reply Quote 0
        • NogBadTheBadN
          NogBadTheBad
          last edited by

          Was going to suggest creating an allow based on ASN number in pfBlocker, looks like the AS number is in the CZ in Europe, which would explain why its being blocked.

          https://asn.cymru.com/cgi-bin/whois.cgi
          Insert your IP or ASN in the textbox above.

          IPv4 [OPTIONAL COMMENT]
          Eg. '4.2.2.2 2004-12-10 11:33:21 GMT'

          AS#
          Eg. 'AS23028'

          IPv6 [OPTIONAL COMMENT]

          --- snip snip ---
          2001:5c0:8fff:fffe::ff6 2004-12-10 11:32:01 GMT
          2001:5c0:8fff:fffe::ff7 2004-12-10 11:33:21 GMT
          --- snip snip ---

          Both IPv4 and IPv6 addresses are supported.
          However, only one address family is permitted
          per query. In other words, you may NOT intermix
          IPv4 and IPv6 addresses.

          Executing commands. Please be patient!

          v4.whois.cymru.com

          The server returned 2 line(s).
          AS | IP | AS Name
          43203 | 185.175.11.191 | PBNET, CZ. << errr

          Andy

          1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

          NogBadTheBadN 1 Reply Last reply Reply Quote 0
          • NogBadTheBadN
            NogBadTheBad @NogBadTheBad
            last edited by

            mac-pro:~ andy$ whois -h whois.radb.net -- '-i origin AS43203'

            route: 185.175.11.0/24
            origin: AS43203
            mnt-by: rsaf-mnt
            mnt-by: mcnetcz-mnt
            created: 2018-03-01T18:41:08Z
            last-modified: 2018-03-01T19:39:13Z
            source: RIPE
            notify: roman@paskov.cz
            remarks: ****************************
            remarks: * THIS OBJECT IS MODIFIED
            remarks: * Please note that all data that is generally regarded as personal
            remarks: * data has been removed from this object.
            remarks: * To view the original object, please query the RIPE Database at:
            remarks: * http://www.ripe.net/whois
            remarks: ****************************

            Andy

            1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.