[olug] list of United States IP blocks

[Lou Duchez]

How would one get a list of United States IP blocks from GeoIP?

I want to load US IPs into iptables and thus keep much of the riffraff out.


> We have only had 1 issue with Google's GeoIP in the 5 years that we have
> used them.  They typically do a very good job at it since their business
> relies on it heavily.  We didn't realize how much until we tried to
> advertise US IP address in some of our overseas offices.  Come to find out
> thats how google decides what datacenter they are going to send you to for
> your docs,email, maps.  Our users were complaing that they weren't seeing
> updates for minutes in shared docs as folks were on conference calls and
> updating them in realtime, Come to find out they were getting served up a
> copy of the doc from a stateside location instead of a datacenter closer to
> them since they had a US based IP.   Google maps would also default to the
> US instead of the country where they were as well.  So yes their GeoIP
> database is usally very accurate.
>
> Trent
>
>
>
> On Thu, Jan 11, 2018 at 11:14 AM, Christopher Cashell <topher-olug at zyp.org>
> wrote:
>
>> On Thu, Jan 11, 2018 at 10:09 AM, Lou Duchez <lou at paprikash.com> wrote:
>>
>>> I found a list of IP blocks assigned to the United States:
>>>
>>> http://www.ipdeny.com/ipblocks/data/aggregated/us-aggregated.zone
>>>
>>> Anyone finding that they're NOT on this list?  I find that my various IPs
>>> are all on here.  There's all sorts of firewally goodness I can use this
>>> list for, assuming it's reliable.  (Assuming they're telling the truth,
>>> they update their list on a daily basis.)
>>>
>> There are lots of pretty good GeoIP databases, but be aware that none of
>> them are going to be perfect, and IP assignment and route advertisements
>> change regularly.  They can be very useful, but if you rely on them, or
>> expect them to be correct, or make decisions such as traffic blocking based
>> on them, you may run into trouble.  At the least, I would recommend not
>> taking hard action beyond very specific subnets that are well known to be
>> assigned to certain countries.
>>
>> It wasn't that long ago that I saw a chunk of public IP space at work that
>> Google believed was from the Philippines.  Accessing Google through that
>> block caused us to get redirected to http://www.google.com.ph, even though
>> the actual Internet connection point was in Denver.  And Google does a
>> better job than most at maintaining GeoIP information.
>>
>> --
>> Christopher
>> _______________________________________________
>> OLUG mailing list
>> OLUG at olug.org
>> https://www.olug.org/mailman/listinfo/olug
>>
>
>