Strange GEO Blocking Issue - PFBlockerNG
-
So, I just started to have issues with GeoBlocking with PFBlockerNG using the Top Spammers list.
It seems to clearly show that the address being blocked is from Canada... After going through each country one by one, I figured out that it is this entry that is causing the issue:
As soon as I enable this country to be blocked, my system starts blocking my Docker VPN connection (Nord) and shows it in the report as being from Canada... This is really odd, and quite confusing.
Anyway, any chance anyone knows what I am doing wrong here? Am I doing something wrong here?
Thanks for any help you can give.
Cheers,
-
This is one of the issues with Geoblocking. The lists are not always accurate. IPv4 address space is like gold, so if a company has a wee bit extra they are eager to sell it as the price they can command is attractively high. This generates quite a bit of "churn" in the IPv4 marketplace as IPv4 subnets are bought, sold, and traded around the globe.
The poor third-party IPv4 geolocation databases have a hard time keeping up with the changes. Thus they might report an IPv4 address block's location incorrectly for some period of time. After all, maybe last week it really was in Canada but this week it's been sold and is in use somewhere else in the world.
-
@scharbag See if you have deduplication checked and if so uncheck it. It dedupes across lists so might yield unexpected results.
IIRC the Top Spammer list, despite the name, is just entire countries. “Rep” I think is things like military bases and embassies so it might actually be in Canada.
-
@SteveITS
Still odd that it seems to KNOW it is in Canada and I did not see the IP range that was being blocked in the list...Oh well, it is working so that is good.
Cheers,