Bug 12092

Summary: geo ip blocking not working?
Product: IPFire Reporter: ipfire
Component: ---Assignee: Assigned to nobody - feel free to grab it and work on it <nobody>
Status: CLOSED DUPLICATE QA Contact:
Severity: Security    
Priority: - Unknown - CC: michael.tremer
Version: 2   
Hardware: x86_64   
OS: Unspecified   

Description ipfire 2019-06-04 07:24:26 UTC 
Hello,

i have ipfire updated to IPFire 2.23 (x86_64) - Core Update 131 and enabled geo ip, all countries except Germany, but I got this in the logs:

05:54:40 	DROP_INPUT 	red0 	TCP 	142.93.103.156 46.XXX.XXX.XXX 	63961 3389 	CA		
05:54:41 	DROP_INPUT 	red0 	TCP 	142.93.103.156 46.XXX.XXX.XXX 	64924 3389 	CA
15:11:27 	DROP_INPUT 	red0 	TCP 	104.248.34.43 46.XXX.XXX.XXX 	32767 8545 	US		
15:16:14 	DROP_INPUT 	red0 	TCP 	35.195.86.234 46.XXX.XXX.XXX 	57081 102(ISO-TSAP) 	EU		
15:33:51 	DROP_INPUT 	red0 	TCP 	62.216.202.93 46.XXX.XXX.XXX 	24348 23(TELNET) 	DE		
15:45:38 	DROP_INPUT 	red0 	TCP 	157.230.119.235 46.XXX.XXX.XXX 	45930 80(HTTP) 	US		

I remember in the last version there are no logs from blocking geo ip?
Comment 1 Michael Tremer 2019-06-04 11:05:07 UTC 
Do you have A1, A2 checked, too?
Comment 2 Michael Tremer 2019-06-04 11:05:17 UTC 

*** This bug has been marked as a duplicate of bug 12076 ***
Comment 3 ipfire 2019-06-04 13:23:19 UTC 
where I can check/ uncheck A1 A2?

In geo IP i have no countries like this or EU