GeoIP vs Feed discrepancy
-
Curious as to where the data for GeoIP is coming from versus the feed column in the reports. I am attempting to block outbound traffic to non-US servers and seeing a number of false positives. In the screenshot attached the GeoIP comes back as US but the feed indicates GB. What is the difference between the two columns and is there anything I can do to use GeoIP results instead of the parent feed?
-
Looks like this is related to the GeoIP2 Lite lists for representative countries. Details in this forum post and the Max Mind release notes.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.