From patchwork Fri May 15 10:27:21 2020 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: =?utf-8?q?Peter_M=C3=BCller?= X-Patchwork-Id: 3099 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 49Nl3j0dZFz3xVh for ; Fri, 15 May 2020 10:28:01 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail02.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 49Nl3h4DFDzXh; Fri, 15 May 2020 10:28:00 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 49Nl3h0JcYz2xcT; Fri, 15 May 2020 10:28:00 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 49Nl3f0sQZz2xcT for ; Fri, 15 May 2020 10:27:58 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384)) (Client did not present a certificate) by mail01.ipfire.org (Postfix) with ESMTPSA id 49Nl3c4frlz6B for ; Fri, 15 May 2020 10:27:56 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1589538477; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=4KAYFkH0V2bnlllkenxakKH2+M642VO5voTH72wa+78=; b=SNNbacoriQjIcmRAH/enT8pVG4tewUGvweM4q4VTK2NtzGyInOG+RpW65b3MCJKnfahuBF 1KCdMgXFFGEpr5Cw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1589538477; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=4KAYFkH0V2bnlllkenxakKH2+M642VO5voTH72wa+78=; b=m/v3RlmD1pNY4sJXF1KgeqVtmGf3fyJtCkWV/U85d6bkM5PK947BiKev0iVSPVl7TR/brf 4dLtg8dzPqtWF7ZaeRaBjcP4uTbnEloiG8T16hsS6EswZGyao0sKto8FofGzgDmUMFfGLw 2n9VGbECekFJtBBp7ubrtqeuNN1AmtHpfCAbszgP0bnxfDm7108LjBGhWACaJhHClnYQCx QFXio/u+7aATMx2COpcSv0koFyjTbXGHlVkHUO4Q3J4khNKkYh3TLQceDHtfaUJkydzd3x NbdW93+FEj7VizHVfqRNkYjwFbQHxuPSQrH+fnKQpZIMaas+drGlLafdMXeReA== To: location@lists.ipfire.org From: =?utf-8?q?Peter_M=C3=BCller?= Subject: [PATCH v2 1/2] override-other.txt: drop non-routable IP networks Message-ID: Date: Fri, 15 May 2020 10:27:21 +0000 MIME-Version: 1.0 Content-Language: en-US X-BeenThere: location@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: location-bounces@lists.ipfire.org Sender: "Location" Authentication-Results: mail01.ipfire.org; none X-Rspamd-Queue-Id: 49Nl3h4DFDzXh X-Spamd-Result: default: False [-4.28 / 11.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; BAYES_HAM(-3.00)[99.99%]; FROM_HAS_DN(0.00)[]; FORGED_SENDER_MAILLIST(0.00)[]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[location@lists.ipfire.org]; TO_DN_NONE(0.00)[]; HAS_LIST_UNSUB(-0.01)[]; RCPT_COUNT_ONE(0.00)[1]; RCVD_COUNT_THREE(0.00)[4]; NEURAL_HAM(-0.97)[-0.972]; MAILLIST(-0.20)[mailman]; FORGED_RECIPIENTS_MAILLIST(0.00)[]; MIME_TRACE(0.00)[0:+]; RCVD_TLS_LAST(0.00)[]; FROM_NEQ_ENVFROM(0.00)[peter.mueller@ipfire.org,location-bounces@lists.ipfire.org]; MID_RHS_MATCH_FROM(0.00)[] X-Rspamd-Server: mail01.haj.ipfire.org These are now handled by the location-importer, so we do not need to maintain an additional list here. Signed-off-by: Peter Müller --- overrides/override-other.txt | 55 +----------------------------------- 1 file changed, 1 insertion(+), 54 deletions(-) diff --git a/overrides/override-other.txt b/overrides/override-other.txt index 9269f28..b970443 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -10,62 +10,9 @@ # or hostile (faked WHOIS data in order to bypass country filtering or # to hide the owners' identity). # -# Further, some networks (such as RFC1918 addresses) must not be -# added to the database since it does not make sense to do so. +# Please keep this file sorted. # -# never add private address blocks (RFC1918) -net: 10.0.0.0/8 -descr: RFC1918 private address block -remarks: must not be added to the database -country: - -net: 172.16.0.0/12 -descr: RFC1918 private address block -remarks: must not be added to the database -country: - -net: 192.168.0.0/16 -descr: RFC1918 private address block -remarks: must not be added to the database -country: - -# never add other special address blocks -net: 0.0.0.0/8 -descr: RFC3232 current network alias -remarks: must not be added to the database -country: - -net: 100.64.0.0/10 -descr: RFC6598 provider CNAT network -remarks: must not be added to the database -country: - -net: 127.0.0.0/8 -descr: RFC3330 localnet -remarks: must not be added to the database -country: - -net: 169.254.0.0/16 -descr: RFC5735 link-local address block -remarks: must not be added to the database -country: - -net: 224.0.0.0/4 -descr: RFC3171 multicast network -remarks: must not be added to the database -country: - -net: ::/128 -descr: IPv6 address which must not assigned anywhere -remarks: must not be added to the database -country: - -net: ::1/128 -descr: IPv6 localhost address -remarks: must not be added to the database -country: - # networks with faked location net: 88.151.117.0/24 descr: Golden Internet LLC From patchwork Fri May 15 10:27:44 2020 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: =?utf-8?q?Peter_M=C3=BCller?= X-Patchwork-Id: 3100 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 49Nl4430WKz3xVh for ; Fri, 15 May 2020 10:28:20 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail02.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 49Nl441sqvzXh; Fri, 15 May 2020 10:28:20 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 49Nl4414VYz2xbY; Fri, 15 May 2020 10:28:20 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 49Nl425B7Wz2xcT for ; Fri, 15 May 2020 10:28:18 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384)) (Client did not present a certificate) by mail01.ipfire.org (Postfix) with ESMTPSA id 49Nl413DtszXh for ; Fri, 15 May 2020 10:28:17 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1589538498; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=clKed5diZME1ai/nSFRNKU17WUGK0gI+iItc12i2hDo=; b=VtCQQKGa8REfHW0s4rID7SjCDzrAfcdaU5YbAQ9cnh7PSbk4/7dIEPKZt7FYjVUzIwGy0+ anJFLrlVURUCTkDA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1589538498; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=clKed5diZME1ai/nSFRNKU17WUGK0gI+iItc12i2hDo=; b=WiMtGoAZEGRdGCT1f4XTeuacouvCwQXbHdShxMw2kq/z42BA1lSRV98kU6dcFMPg+PJ32U vrwz0h6B1hwyp3vLTadC2Zs9FsXTwh8TmFuRC0Um9sRP4w7kPkI+DjjBDuGKW6jTiSC9Yh TBoYEqP4hNtvWtVZdMmqiE6i3B26PrIMx/rFLLgbivtwv1NMUylNFR5IDm/aOoU8ImvoOt ZjEgQ9wjorvIgnIFDlGlLCBiOVO5GX2TPK00kT4j3ULa0TbdmGu1/1RGNvIP8keyi3ToJ7 hC34lBvjo0pqa4CuA+KToHVaszHzMkq8EaHWH8Ojg/2eBLO4yVgUBPWvzJlzFw== Subject: [PATCH v2 2/2] override-other.txt: add some ASNs with faked location To: location@lists.ipfire.org References: From: =?utf-8?q?Peter_M=C3=BCller?= Message-ID: <48a1eee7-d891-f42a-e1d0-b209744d8445@ipfire.org> Date: Fri, 15 May 2020 10:27:44 +0000 MIME-Version: 1.0 In-Reply-To: Content-Language: en-US X-BeenThere: location@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: location-bounces@lists.ipfire.org Sender: "Location" Authentication-Results: mail01.ipfire.org; none X-Rspamd-Queue-Id: 49Nl441sqvzXh X-Spamd-Result: default: False [-4.29 / 11.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; BAYES_HAM(-3.00)[99.99%]; FROM_HAS_DN(0.00)[]; FORGED_SENDER_MAILLIST(0.00)[]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[location@lists.ipfire.org]; TO_DN_NONE(0.00)[]; HAS_LIST_UNSUB(-0.01)[]; RCPT_COUNT_ONE(0.00)[1]; RCVD_COUNT_THREE(0.00)[4]; NEURAL_HAM(-0.98)[-0.975]; MAILLIST(-0.20)[mailman]; FORGED_RECIPIENTS_MAILLIST(0.00)[]; RCVD_TLS_LAST(0.00)[]; MIME_TRACE(0.00)[0:+]; FROM_NEQ_ENVFROM(0.00)[peter.mueller@ipfire.org,location-bounces@lists.ipfire.org]; MID_RHS_MATCH_FROM(0.00)[] X-Rspamd-Server: mail01.haj.ipfire.org Signed-off-by: Peter Müller --- overrides/override-other.txt | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/overrides/override-other.txt b/overrides/override-other.txt index b970443..3d1ed2f 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -13,7 +13,16 @@ # Please keep this file sorted. # -# networks with faked location +asnum: AS62355 +descr: Network Dedicated SAS +remarks: bulletproof ISP, claims to be located in CH, but traces to NL +country: NL + +asnum: AS207616 +descr: Altrosky Technology Ltd. +remarks: fake offshore location (SC), traces back to CZ +country: CZ + net: 88.151.117.0/24 descr: Golden Internet LLC remarks: fake location (KP), WHOIS contact points to RU