Koozali.org: home of the SME Server

Xt GeoIP - BadCountries

Offline gieres

  • *
  • 199
  • +0/-0
Xt GeoIP - BadCountries
« on: September 08, 2023, 03:33:24 PM »
Hi,
SME 10 - Server and gateway
Xt GeoIP installed
BadCountries :
Code: [Select]
config show masq
masq=service
    BadCountries=SG,CN,IN,VN,BR,TW,KR,ID,RU,FI,HK,UA,NG,AR
    DenylogTarget=drop
    GeoIP=enabled
    Logging=most
    Stealth=no
    Trace=disabled
    XTGeoipOther=disabled
    XTGeoipRev=disabled
    XtServices=ftp,imap,imaps,pop3,pop3s,qpsmtpd,sqpsmtpd,sshd,pptpd
    pptp=yes
    status=enabled

In server-manager, in GeoIP panel, in statistics, it's wroten :

Administration XTABLES-ADDONS
GeoIP
Statistiques générées [ ipt ] 2023/09/08 02:05

  Smeserver daily statistics for Xtables - GEOIP
           from kooz2.albe.ovh - 2023-09-07

  Numbers of IPs banned (xt_geoip) by country during LAST DAY
       ( XX means 'country not found' )

--------------------
CN | 5752 | 44.6%
IN | 1515 | 11.8%
RU | 1154 | 9.0%
KR | 1246 | 9.7%
XX | 843 | 6.5%
BR | 453 | 3.5%
VN | 360 | 2.8%
TW | 293 | 2.3%
US | 174 | 1.4%
SG | 125 | 1.0%
NL | 135 | 1.0%
HK | 203 | 1.6%
UA | 71 | 0.6%
SE | 4 | 0.0%
PL | 107 | 0.8%
PA | 1 | 0.0%
NG | 13 | 0.1%
LU | 4 | 0.0%
KH | 1 | 0.0%
JP | 76 | 0.6%
IL | 4 | 0.0%
ID | 107 | 0.8%
GB | 32 | 0.2%
FR | 17 | 0.1%
FI | 18 | 0.1%
DE | 24 | 0.2%
CY | 4 | 0.0%
CR | 3 | 0.0%
CO | 26 | 0.2%
CA | 6 | 0.0%
BO | 2 | 0.0%
AU | 2 | 0.0%
AT | 4 | 0.0%
AR | 106 | 0.8%
--------------------
   | 12885 | 100%
--------------------

Why so many IPs (and SPECIALLY so many countries) banned by Xt GeoIP while BadCountries contains only 14 countries ?

Thanks in advance.
« Last Edit: September 12, 2023, 07:42:00 PM by gieres »

Offline ReetP

  • *
  • 3,604
  • +5/-0
Re: Xt GeoIP - BadCountries
« Reply #1 on: September 08, 2023, 05:19:33 PM »
Have you got any 'per service' filters set?

eg you may have generic ones in

Code: [Select]
config show masq

But others in:

Code: [Select]
config show qpsmtpd
Check all your services for 'BadCountries'

Code: [Select]
config show |grep BadCountries
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline Jean-Philippe Pialasse

  • *
  • 2,632
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: Xt GeoIP - BadCountries
« Reply #2 on: September 11, 2023, 07:16:22 PM »
Code: [Select]
config getprop sshd BadCountries

Offline gieres

  • *
  • 199
  • +0/-0
Re: Xt GeoIP - BadCountries
« Reply #3 on: September 12, 2023, 07:56:41 PM »
Have you got any 'per service' filters set?

No.

Code: [Select]
config show |grep BadCountries
    BadCountries=SG,CN,IN,VN,BR,TW,KR,ID,RU,FI,HK,UA,NG,AR

Code: [Select]
config getprop sshd BadCountries
[root@sme ~]#config getprop sshd BadCountries
[root@sme ~]#
Nothing.