DrayTek UK Users' Community Forum

Help, Advice and Solutions from DrayTek Users

Country Object - What Country?

  • Andy
  • Topic Author
  • Offline
  • Junior Member
  • Junior Member
More
05 Aug 2024 12:59 #103557 by Andy
Country Object - What Country? was created by Andy
We have a firewall rule to block all inbound from outside the UK using Country Objects. We had a user today who was unable to connect into the office, I can see in the syslog the firewall rule is blocking her but when I lookup her IP every site is saying its a UK IP. Is there a way to tell from the syslog what country the Draytek firmware thinks the IP is in so I can add that country to the rule?

[FILTER][Block][WAN->LAN/RT/VPN, 983:04:24 ][@S:R=2:3, 45.89.X.X:50260->192.168.X.X:443][TCP][HLen=20, TLen=52, Flag=S, Seq=2972358332, Ack=0, Win=64240]

Please Log in or Create an account to join the conversation.

More
05 Aug 2024 17:00 #103560 by piste basher
Replied by piste basher on topic Country Object - What Country?
Guessing that 45.89.X.X is the source IP address (only a guess mind) an IP lookup suggests a number of possible countries. Perhaps you can narrow it down if you know the X and X?

Please Log in or Create an account to join the conversation.

More
05 Aug 2024 22:05 - 05 Aug 2024 22:06 #103561 by pharcyder
Replied by pharcyder on topic Country Object - What Country?
No, there is no way of checking what Country DrayOS thinks you're in that I am aware of. Maybe there is a CLI command for it. Draytek uses a 3rd party IP list and that list is point in time. It becomes outdated quite quick as IP blocks are sold between ISPs globally all the time. The Country IP list in DrayOS is only updated when new firmware is released and there is no guarantee each firmware has an updated Country IP list baked into it.
 
Last edit: 05 Aug 2024 22:06 by pharcyder.

Please Log in or Create an account to join the conversation.

  • Andy
  • Topic Author
  • Offline
  • Junior Member
  • Junior Member
More
06 Aug 2024 11:14 - 06 Aug 2024 11:15 #103564 by Andy
Replied by Andy on topic Country Object - What Country?

Guessing that 45.89.X.X is the source IP address (only a guess mind) an IP lookup suggests a number of possible countries. Perhaps you can narrow it down if you know the X and X?


Sorry I swapped the actual IP for X's to hide it, I have looked it up on several sites but all say its a UK IP.
Last edit: 06 Aug 2024 11:15 by Andy.

Please Log in or Create an account to join the conversation.

  • Andy
  • Topic Author
  • Offline
  • Junior Member
  • Junior Member
More
06 Aug 2024 11:16 #103565 by Andy
Replied by Andy on topic Country Object - What Country?

pharcyder post=103561 userid=38192No, there is no way of checking what Country DrayOS thinks you're in that I am aware of. Maybe there is a CLI command for it. Draytek uses a 3rd party IP list and that list is point in time. It becomes outdated quite quick as IP blocks are sold between ISPs globally all the time. The Country IP list in DrayOS is only updated when new firmware is released and there is no guarantee each firmware has an updated Country IP list baked into it.
 


That's a shame, I was hoping that syslog would tell me, or there being some kind of inbuilt query I could do via telnet

Please Log in or Create an account to join the conversation.

More
06 Aug 2024 16:46 #103566 by piste basher
Replied by piste basher on topic Country Object - What Country?
A shame , but I suspect pharcyder is right. Some time ago my ISP (Zen) decided to change the block of IP's I had had for years and re-issue me with different ones. They claimed this had something to do with the "lack of IP4 addresses" issue but since they gave me the same number of addresses as I had previously I was always dubious about this. In any event, for some months afterwards several sites thought I was in Chicago (including test IPv6 sites and the National Lottery - the latter saved me money as I was unable to buy tickets "not being in the UK" :-) ) Only over several months have things slowly resolved themselves.

Please Log in or Create an account to join the conversation.

Moderators: ChrisSami