Bug 12480 - location based firewall rule do not trigger for the selected country
Summary: location based firewall rule do not trigger for the selected country
Status: CLOSED FIXED
Alias: None
Product: IPFire
Classification: Unclassified
Component: --- (show other bugs)
Version: 2
Hardware: all All
: Will affect all users Major Usability
Assignee: Michael Tremer
QA Contact: Peter Müller
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2020-09-04 17:05 UTC by Peter Müller
Modified: 2020-10-09 19:03 UTC (History)
4 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Peter Müller 2020-09-04 17:05:53 UTC 
See also: https://community.ipfire.org/t/location-filter-since-core-148/3149

Since I am able to reproduce this (traffic to 94.109.230.190 is being dropped despite libloc recognising this IP address to belong to Belgium), this seems to be a bug in the firewall engine.

A /16 within Germany is known to work, so perhaps CIDRs larger than a /16 cause trouble?
Comment 1 Peter Müller 2020-09-07 18:31:47 UTC 
@Michael: Here you are. :-)
Comment 2 Michael Tremer 2020-10-05 15:37:01 UTC 
This should be fixed in here and should be release with Core Update 150:

https://git.ipfire.org/?p=location/libloc.git;a=commitdiff;h=43554dc4659cbb0d4c477fbff69cfbb5f21e4f13