Bug 12480

Summary: location based firewall rule do not trigger for the selected country
Product: IPFire Reporter: Peter Müller <peter.mueller>
Component: ---Assignee: Michael Tremer <michael.tremer>
Status: CLOSED FIXED QA Contact: Peter Müller <peter.mueller>
Severity: Major Usability    
Priority: Will affect all users CC: arne.fitzenreiter, horace.michael, michael.tremer, stefan.schantl
Version: 2   
Hardware: all   
OS: All   

Description Peter Müller 2020-09-04 17:05:53 UTC 
See also: https://community.ipfire.org/t/location-filter-since-core-148/3149

Since I am able to reproduce this (traffic to 94.109.230.190 is being dropped despite libloc recognising this IP address to belong to Belgium), this seems to be a bug in the firewall engine.

A /16 within Germany is known to work, so perhaps CIDRs larger than a /16 cause trouble?
Comment 1 Peter Müller 2020-09-07 18:31:47 UTC 
@Michael: Here you are. :-)
Comment 2 Michael Tremer 2020-10-05 15:37:01 UTC 
This should be fixed in here and should be release with Core Update 150:

https://git.ipfire.org/?p=location/libloc.git;a=commitdiff;h=43554dc4659cbb0d4c477fbff69cfbb5f21e4f13