[xtables-addons] geoip in Debian 7 working fine (--> please update the distro matrix)

[xtables-addons] geoip in Debian 7 working fine (--> please update the distro matrix)

[U.Mutlu]

Hello,
please update the matrix at
http://xtables-addons.sourceforge.net/distro-support.php?p=kernel%7Ciptables%7Cxtables-addons%7Cxtables-geoip&d=.*
for Debian 7 (wheezy), as geoip is working well in that distribution
(the pkg "xtables-addons-common" from the debian repo must be installed).

Proof:
  1050 44349 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            Source country: CN
    11   374 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            Source country: HK

:-)

Re: [xtables-addons] geoip in Debian 7 working fine (--> please update the distro matrix)

[Jan Engelhardt]

On Monday 2012-10-15 13:55, U.Mutlu wrote:

> Hello,
> please update the matrix at
> http://xtables-addons.sourceforge.net/distro-support.php?p=kernel%7Ciptables%7Cxtables-addons%7Cxtables-geoip&d=.*
> for Debian 7 (wheezy), as geoip is working well in that distribution
> (the pkg "xtables-addons-common" from the debian repo must be installed).

Debian does not provide a xtables-geoip package.

Re: [xtables-addons] geoip in Debian 7 working fine (--> please update the distro matrix)

[U.Mutlu]

Jan Engelhardt wrote, On 10/18/2012 07:18 PM:
> On Monday 2012-10-15 13:55, U.Mutlu wrote:
>
>> Hello,
>> please update the matrix at
>> http://xtables-addons.sourceforge.net/distro-support.php?p=kernel%7Ciptables%7Cxtables-addons%7Cxtables-geoip&d=.*
>> for Debian 7 (wheezy), as geoip is working well in that distribution
>> (the pkg "xtables-addons-common" from the debian repo must be installed).
>
> Debian does not provide a xtables-geoip package.

As said, I've it working fine here, I used the following steps:

apt-get install xtables-addons-common libtext-csv-xs-perl
mkdir -p /usr/share/xt_geoip
cd /usr/lib/xtables-addons
./xt_geoip_dl
./xt_geoip_build -D /usr/share/xt_geoip *.csv

then restart the firewall script with the iptables geoip rules.

But: this is on physical host nodes only, don't know if it works also
in virtual systems like openvz containers on the host

Re: [xtables-addons] geoip in Debian 7 working fine (--> please update the distro matrix)

[U.Mutlu]

U.Mutlu wrote, On 10/18/2012 07:48 PM:
> Jan Engelhardt wrote, On 10/18/2012 07:18 PM:
>> On Monday 2012-10-15 13:55, U.Mutlu wrote:
>>
>>> Hello,
>>> please update the matrix at
>>> http://xtables-addons.sourceforge.net/distro-support.php?p=kernel%7Ciptables%7Cxtables-addons%7Cxtables-geoip&d=.*
>>>
>>> for Debian 7 (wheezy), as geoip is working well in that distribution
>>> (the pkg "xtables-addons-common" from the debian repo must be installed).
>>
>> Debian does not provide a xtables-geoip package.
>
> As said, I've it working fine here, I used the following steps:
>
> apt-get install xtables-addons-common libtext-csv-xs-perl
> mkdir -p /usr/share/xt_geoip
> cd /usr/lib/xtables-addons
> ../xt_geoip_dl
> ../xt_geoip_build -D /usr/share/xt_geoip *.csv

oops, the mailer has made "..", it must of course be
   ./xt_geoip_dl
   ./xt_geoip_build -D /usr/share/xt_geoip *.csv


> then restart the firewall script with the iptables geoip rules.
>
> But: this is on physical host nodes only, don't know if it works also
> in virtual systems like openvz containers on the host

Re: [xtables-addons] geoip in Debian 7 working fine (--> please update the distro matrix)

[Jan Engelhardt]

On Thursday 2012-10-18 19:48, U.Mutlu wrote:

> Jan Engelhardt wrote, On 10/18/2012 07:18 PM:
>> On Monday 2012-10-15 13:55, U.Mutlu wrote:
>>
>>> Hello,
>>> please update the matrix at
>>> http://xtables-addons.sourceforge.net/distro-support.php?p=kernel%7Ciptables%7Cxtables-addons%7Cxtables-geoip&d=.*
>>> for Debian 7 (wheezy), as geoip is working well in that distribution
>>> (the pkg "xtables-addons-common" from the debian repo must be installed).
>>
>> Debian does not provide a xtables-geoip package.
>
> As said, I've it working fine here, I used the following steps:

I believe you that you did get it to work. However, the table is 
expressly about distro-package availability (it even says so in big 
letters), and Debian simply does not have anything premade such that you 
could `apt-get install xtables-geoip` to retrieve a (more-or-less) 
recent version of the geoip db ready for use.