Topic: Xt GeoIP - BadCountries

[gieres]

Hi,
SME 10 - Server and gateway
Xt GeoIP installed
BadCountries :

Code: [Select]

config show masq
masq=service
    BadCountries=SG,CN,IN,VN,BR,TW,KR,ID,RU,FI,HK,UA,NG,AR
    DenylogTarget=drop
    GeoIP=enabled
    Logging=most
    Stealth=no
    Trace=disabled
    XTGeoipOther=disabled
    XTGeoipRev=disabled
    XtServices=ftp,imap,imaps,pop3,pop3s,qpsmtpd,sqpsmtpd,sshd,pptpd
    pptp=yes
    status=enabled

In server-manager, in GeoIP panel, in statistics, it's wroten :

Administration XTABLES-ADDONS
GeoIP
Statistiques générées [ ipt ] 2023/09/08 02:05

  Smeserver daily statistics for Xtables - GEOIP
           from kooz2.albe.ovh - 2023-09-07

  Numbers of IPs banned (xt_geoip) by country during LAST DAY
       ( XX means 'country not found' )

--------------------
CN | 5752 | 44.6%
IN | 1515 | 11.8%
RU | 1154 | 9.0%
KR | 1246 | 9.7%
XX | 843 | 6.5%
BR | 453 | 3.5%
VN | 360 | 2.8%
TW | 293 | 2.3%
US | 174 | 1.4%
SG | 125 | 1.0%
NL | 135 | 1.0%
HK | 203 | 1.6%
UA | 71 | 0.6%
SE | 4 | 0.0%
PL | 107 | 0.8%
PA | 1 | 0.0%
NG | 13 | 0.1%
LU | 4 | 0.0%
KH | 1 | 0.0%
JP | 76 | 0.6%
IL | 4 | 0.0%
ID | 107 | 0.8%
GB | 32 | 0.2%
FR | 17 | 0.1%
FI | 18 | 0.1%
DE | 24 | 0.2%
CY | 4 | 0.0%
CR | 3 | 0.0%
CO | 26 | 0.2%
CA | 6 | 0.0%
BO | 2 | 0.0%
AU | 2 | 0.0%
AT | 4 | 0.0%
AR | 106 | 0.8%
--------------------
   | 12885 | 100%
--------------------

Why so many IPs (and SPECIALLY so many countries) banned by Xt GeoIP while BadCountries contains only 14 countries ?

Thanks in advance.

[ReetP]

Have you got any 'per service' filters set?

eg you may have generic ones in

Code: [Select]

config show masq

But others in:

Code: [Select]

config show qpsmtpd
Check all your services for 'BadCountries'

Code: [Select]

config show |grep BadCountries

[Jean-Philippe Pialasse]

Code: [Select]

config getprop sshd BadCountries

[gieres]

Have you got any 'per service' filters set?

No.

Code: [Select]

config show |grep BadCountries
    BadCountries=SG,CN,IN,VN,BR,TW,KR,ID,RU,FI,HK,UA,NG,AR

Code: [Select]

config getprop sshd BadCountries

[root@sme ~]#config getprop sshd BadCountries
[root@sme ~]#
Nothing.