[olug] list of United States IP blocks
lou at paprikash.com
Fri Jan 12 18:22:06 CST 2018
How would one get a list of United States IP blocks from GeoIP?
I want to load US IPs into iptables and thus keep much of the riffraff out.
> We have only had 1 issue with Google's GeoIP in the 5 years that we have
> used them. They typically do a very good job at it since their business
> relies on it heavily. We didn't realize how much until we tried to
> advertise US IP address in some of our overseas offices. Come to find out
> thats how google decides what datacenter they are going to send you to for
> your docs,email, maps. Our users were complaing that they weren't seeing
> updates for minutes in shared docs as folks were on conference calls and
> updating them in realtime, Come to find out they were getting served up a
> copy of the doc from a stateside location instead of a datacenter closer to
> them since they had a US based IP. Google maps would also default to the
> US instead of the country where they were as well. So yes their GeoIP
> database is usally very accurate.
> On Thu, Jan 11, 2018 at 11:14 AM, Christopher Cashell <topher-olug at zyp.org>
>> On Thu, Jan 11, 2018 at 10:09 AM, Lou Duchez <lou at paprikash.com> wrote:
>>> I found a list of IP blocks assigned to the United States:
>>> Anyone finding that they're NOT on this list? I find that my various IPs
>>> are all on here. There's all sorts of firewally goodness I can use this
>>> list for, assuming it's reliable. (Assuming they're telling the truth,
>>> they update their list on a daily basis.)
>> There are lots of pretty good GeoIP databases, but be aware that none of
>> them are going to be perfect, and IP assignment and route advertisements
>> change regularly. They can be very useful, but if you rely on them, or
>> expect them to be correct, or make decisions such as traffic blocking based
>> on them, you may run into trouble. At the least, I would recommend not
>> taking hard action beyond very specific subnets that are well known to be
>> assigned to certain countries.
>> It wasn't that long ago that I saw a chunk of public IP space at work that
>> Google believed was from the Philippines. Accessing Google through that
>> block caused us to get redirected to http://www.google.com.ph, even though
>> the actual Internet connection point was in Denver. And Google does a
>> better job than most at maintaining GeoIP information.
>> OLUG mailing list
>> OLUG at olug.org
More information about the OLUG