pfBlockerNG complaining about missing MaxMind key, but MM not in use

[emefff]

Hello,

since one week or so, pfBlockerNG complains about a missing license key in MaxMind. The problem is: I never used MaxMind, at least not knowingly. Maybe I missed something, do I have to turn it off somewhere? I am also getting a lot of notifications about this (about ~10 per day, I update once per day), one should be enough.

Any help appreciated, thank you,

Mario.

[Bob.Dig]

@emefff Do you use GeoIP?

[emefff]

@Bob-Dig
All entries are disabled in GeoIP:

Maybe it is somehow still running and wants to connect to MaxMind?

[Bob.Dig]

@emefff In your first screenshots, disable maxmind CSV Updates.

[emefff]

@Bob-Dig
It was disabled over night. I only reverted just before writing the first post (in that sense, the first post is not entirely correct).

Disabling doesn't seem to have an effect (It says in the description: "This does not affect the MaxMind binary cron update that is used for other GeoIP funcionality in the package."). Thus I assume, the notifications/errors are from this 'other functionality'.

I might add: in the IP feeds, there is an entry connected to MaxMind which is also deactivated. This also didn't change or influence the notifications/errors that I am getting.

[Bob.Dig]

@emefff Technically you can use GeoIP in your own custom lists too, so make sure, you are not using it there.

[emefff]

How?

I only use a single custom IPv4 list, that is the MS Office 365 list that is published by MS at

https://endpoints.office.com/endpoints/worldwide?noipv6&ClientRequestId=b10c5ed1-bad1-445f-b386-b919946339a7

All other list I use are from the regular feeds.

[Bob.Dig]

@emefff said in pfBlockerNG complaining about missing MaxMind key, but MM not in use:

How?

I only use a single custom IPv4 list, that is the MS Office 365 list that is published by MS at

If you only got that list, then you are good and I can't find a reason for what you are seeing.

Spoiler

[emefff]

Oh, all my formats are on AUTO, so I'll have to find out which list has GeoIP format.... :-(

So I have to go through all the non-custom lists? This could take while, and I don't know what to look for. Maybe there is a keyword like GEO-something?

EDIT: there might be an easier way, I just sift through the update.log of pfblocker and discard lists that show something like "Classifying repeat offenders by GeoIP".

EDIT2: Oh, the reputation functions dmax and pmax use GeoIP! I turned these on a week ago or so.... Embarrassing, I should have made the connection!

Thanks @Bob-Dig , I am confident that turning reputation off is the solution.

Will report back if I am wrong..