geoip+iptables+Ubuntu

[riondi]

Приветствую. Проблема такая. Делаю по этой инструкции: https://debian.pro/510

база генерируется.Но при вводе команды для iptables iptables -I INPUT ! -i lo -m geoip --src-cc CN -j DROP, выдается:
Could not open /usr/share/xt_geoip/LE/CN.iv4: No such file or directory                                                                                                             
iptables v1.4.12: Could not read geoip database 

как можно это поправить? или есть какие-нибудь вльтернативы бана по странам?

[fisher74]

Значит не генерируется раз не находит. Сами-то смотрели? Есть такой файл?
Я не знаю причину выбора описания  процесса для debian, когда третьей строчкой в ответе гугла русскоязычная статья по вводу geoip на ubuntu

[riondi]

я так понимаю, вот эта генерация:

(Нажмите, чтобы показать/скрыть)

oot@server:/home/dmitrii/xtables/geoip# ./geoip_download.sh
--2013-07-31 20:47:11--  http://geolite.maxmind.com/download/geoip/database/GeoIPv6.csv.gz
Распознаётся geolite.maxmind.com (geolite.maxmind.com)... 108.168.255.243
Подключение к geolite.maxmind.com (geolite.maxmind.com)|108.168.255.243|:80... соединение установлено.
HTTP-запрос отправлен. Ожидание ответа... 200 OK
Длина: 683081 (667K) [application/octet-stream]
Сохранение в: «GeoIPv6.csv.gz»

100%[==========================================================================================================================================>] 683 081      449KB/s   за 1,5s   

2013-07-31 20:47:13 (449 KB/s) - «GeoIPv6.csv.gz» сохранён [683081/683081]

--2013-07-31 20:47:13--  http://geolite.maxmind.com/download/geoip/database/GeoIPCountryCSV.zip
Повторное использование соединения с geolite.maxmind.com:80.
HTTP-запрос отправлен. Ожидание ответа... 200 OK
Длина: 1242486 (1,2M) [application/zip]
Сохранение в: «GeoIPCountryCSV.zip»

100%[==========================================================================================================================================>] 1 242 486    622KB/s   за 2,0s   

2013-07-31 20:47:15 (622 KB/s) - «GeoIPCountryCSV.zip» сохранён [1242486/1242486]

ЗАВЕРШЕНО --2013-07-31 20:47:15--
Общее время: 4,0s
Загружено: 2 файлов, 1,8M в 3,4s (547 KB/s)
Archive:  GeoIPCountryCSV.zip
  inflating: GeoIPCountryWhois.csv   
root@server:/home/dmitrii/xtables/geoip# mkdir -p /usr/share/xt_geoip/LE
root@server:/home/dmitrii/xtables/geoip#  ./geoip_build_db.pl -D /usr/share/xt_geoip/LE < GeoIPCountryWhois.csv
80623 entries total
  383 ranges for A1 Anonymous Proxy
  367 ranges for A2 Satellite Provider
    7 ranges for AD Andorra
  112 ranges for AE United Arab Emirates
   56 ranges for AF Afghanistan
   54 ranges for AG Antigua and Barbuda
   10 ranges for AI Anguilla
   77 ranges for AL Albania
   91 ranges for AM Armenia
   52 ranges for AO Angola
  209 ranges for AP Asia/Pacific Region
    4 ranges for AQ Antarctica
  610 ranges for AR Argentina
   15 ranges for AS American Samoa
 1034 ranges for AT Austria
 2769 ranges for AU Australia
   11 ranges for AW Aruba
   11 ranges for AX Aland Islands
   78 ranges for AZ Azerbaijan
  114 ranges for BA Bosnia and Herzegovina
   71 ranges for BB Barbados
  229 ranges for BD Bangladesh
  804 ranges for BE Belgium
   15 ranges for BF Burkina Faso
  529 ranges for BG Bulgaria
   54 ranges for BH Bahrain
   11 ranges for BI Burundi
   18 ranges for BJ Benin
    1 ranges for BL Saint Barthelemy
   38 ranges for BM Bermuda
   19 ranges for BN Brunei Darussalam
   56 ranges for BO Bolivia
    6 ranges for BQ Bonaire, Saint Eustatius and Saba
  160 ranges for BR Brazil
   25 ranges for BS Bahamas
    9 ranges for BT Bhutan
   29 ranges for BW Botswana
   84 ranges for BY Belarus
   29 ranges for BZ Belize
 2773 ranges for CA Canada
    1 ranges for CC Cocos (Keeling) Islands
   32 ranges for CD Congo, The Democratic Republic of the
    6 ranges for CF Central African Republic
   17 ranges for CG Congo
 1419 ranges for CH Switzerland
   22 ranges for CI Cote D'Ivoire
    3 ranges for CK Cook Islands
  309 ranges for CL Chile
   37 ranges for CM Cameroon
 2119 ranges for CN China
  313 ranges for CO Colombia
  109 ranges for CR Costa Rica
   17 ranges for CU Cuba
    8 ranges for CV Cape Verde
   52 ranges for CW Curacao
    1 ranges for CX Christmas Island
  144 ranges for CY Cyprus
  875 ranges for CZ Czech Republic
 4611 ranges for DE Germany
    7 ranges for DJ Djibouti
  797 ranges for DK Denmark
   18 ranges for DM Dominica
   56 ranges for DO Dominican Republic
   41 ranges for DZ Algeria
  157 ranges for EC Ecuador
  203 ranges for EE Estonia
  144 ranges for EG Egypt
    1 ranges for EH Western Sahara
    2 ranges for ER Eritrea
 1198 ranges for ES Spain
    3 ranges for ET Ethiopia
 1601 ranges for EU Europe
  685 ranges for FI Finland
   26 ranges for FJ Fiji
    4 ranges for FK Falkland Islands (Malvinas)
    3 ranges for FM Micronesia, Federated States of
   10 ranges for FO Faroe Islands
 2867 ranges for FR France
   29 ranges for GA Gabon
 5776 ranges for GB United Kingdom
   29 ranges for GD Grenada
  115 ranges for GE Georgia
   42 ranges for GF French Guiana
   22 ranges for GG Guernsey
   83 ranges for GH Ghana
   28 ranges for GI Gibraltar
    5 ranges for GL Greenland
   10 ranges for GM Gambia
   30 ranges for GN Guinea
  109 ranges for GP Guadeloupe
    8 ranges for GQ Equatorial Guinea
  326 ranges for GR Greece
    1 ranges for GS South Georgia and the South Sandwich Islands
   94 ranges for GT Guatemala
   39 ranges for GU Guam
    4 ranges for GW Guinea-Bissau
    8 ranges for GY Guyana
  845 ranges for HK Hong Kong
  112 ranges for HN Honduras
  186 ranges for HR Croatia
   22 ranges for HT Haiti
  405 ranges for HU Hungary
  808 ranges for ID Indonesia
  484 ranges for IE Ireland
  384 ranges for IL Israel
   35 ranges for IM Isle of Man
 1125 ranges for IN India
    4 ranges for IO British Indian Ocean Territory
  101 ranges for IQ Iraq
  380 ranges for IR Iran, Islamic Republic of
   81 ranges for IS Iceland
 1758 ranges for IT Italy
   23 ranges for JE Jersey
   52 ranges for JM Jamaica
   93 ranges for JO Jordan
 1657 ranges for JP Japan
  143 ranges for KE Kenya
   59 ranges for KG Kyrgyzstan
   81 ranges for KH Cambodia
    3 ranges for KI Kiribati
    5 ranges for KM Comoros
   41 ranges for KN Saint Kitts and Nevis
    4 ranges for KP Korea, Democratic People's Republic of
  665 ranges for KR Korea, Republic of
  130 ranges for KW Kuwait
   25 ranges for KY Cayman Islands
  195 ranges for KZ Kazakhstan
   17 ranges for LA Lao People's Democratic Republic
  111 ranges for LB Lebanon
   24 ranges for LC Saint Lucia
   47 ranges for LI Liechtenstein
   44 ranges for LK Sri Lanka
   19 ranges for LR Liberia
   25 ranges for LS Lesotho
  238 ranges for LT Lithuania
  167 ranges for LU Luxembourg
  318 ranges for LV Latvia
   20 ranges for LY Libya
   32 ranges for MA Morocco
   20 ranges for MC Monaco
  158 ranges for MD Moldova, Republic of
   34 ranges for ME Montenegro
    7 ranges for MF Saint Martin
   19 ranges for MG Madagascar
    2 ranges for MH Marshall Islands
   78 ranges for MK Macedonia
   11 ranges for ML Mali
    9 ranges for MM Myanmar
   54 ranges for MN Mongolia
   17 ranges for MO Macau
   12 ranges for MP Northern Mariana Islands
  103 ranges for MQ Martinique
   10 ranges for MR Mauritania
    5 ranges for MS Montserrat
   79 ranges for MT Malta
   54 ranges for MU Mauritius
   11 ranges for MV Maldives
   29 ranges for MW Malawi
  143 ranges for MX Mexico
  314 ranges for MY Malaysia
   37 ranges for MZ Mozambique
   34 ranges for NA Namibia
   29 ranges for NC New Caledonia
    9 ranges for NE Niger
    2 ranges for NF Norfolk Island
  255 ranges for NG Nigeria
   37 ranges for NI Nicaragua
 2507 ranges for NL Netherlands
  822 ranges for NO Norway
   49 ranges for NP Nepal
    4 ranges for NR Nauru
    3 ranges for NU Niue
  485 ranges for NZ New Zealand
   29 ranges for OM Oman
  139 ranges for PA Panama
  107 ranges for PE Peru
    9 ranges for PF French Polynesia
   33 ranges for PG Papua New Guinea
  311 ranges for PH Philippines
  176 ranges for PK Pakistan
 2703 ranges for PL Poland
    6 ranges for PM Saint Pierre and Miquelon
    1 ranges for PN Pitcairn Islands
  196 ranges for PR Puerto Rico
   83 ranges for PS Palestinian Territory
  300 ranges for PT Portugal
    5 ranges for PW Palau
   39 ranges for PY Paraguay
   27 ranges for QA Qatar
  147 ranges for RE Reunion
 1222 ranges for RO Romania
  260 ranges for RS Serbia
 5363 ranges for RU Russian Federation
   17 ranges for RW Rwanda
  297 ranges for SA Saudi Arabia
    7 ranges for SB Solomon Islands
  219 ranges for SC Seychelles
   26 ranges for SD Sudan
 1663 ranges for SE Sweden
  614 ranges for SG Singapore
    2 ranges for SH Saint Helena
  381 ranges for SI Slovenia
    1 ranges for SJ Svalbard and Jan Mayen
  290 ranges for SK Slovakia
   17 ranges for SL Sierra Leone
   10 ranges for SM San Marino
   10 ranges for SN Senegal
   10 ranges for SO Somalia
   11 ranges for SR Suriname
    4 ranges for SS South Sudan
    3 ranges for ST Sao Tome and Principe
   66 ranges for SV El Salvador
    5 ranges for SX Sint Maarten (Dutch part)
   47 ranges for SY Syrian Arab Republic
   18 ranges for SZ Swaziland
   12 ranges for TC Turks and Caicos Islands
    4 ranges for TD Chad
    1 ranges for TF French Southern Territories
    7 ranges for TG Togo
  310 ranges for TH Thailand
   26 ranges for TJ Tajikistan
    3 ranges for TK Tokelau
    5 ranges for TL Timor-Leste
    5 ranges for TM Turkmenistan
    9 ranges for TN Tunisia
    6 ranges for TO Tonga
  549 ranges for TR Turkey
   27 ranges for TT Trinidad and Tobago
    2 ranges for TV Tuvalu
  321 ranges for TW Taiwan
   85 ranges for TZ Tanzania, United Republic of
 2524 ranges for UA Ukraine
   41 ranges for UG Uganda
    2 ranges for UM United States Minor Outlying Islands
 8460 ranges for US United States
   35 ranges for UY Uruguay
   58 ranges for UZ Uzbekistan
   26 ranges for VA Holy See (Vatican City State)
   19 ranges for VC Saint Vincent and the Grenadines
  204 ranges for VE Venezuela
   30 ranges for VG Virgin Islands, British
   39 ranges for VI Virgin Islands, U.S.
  226 ranges for VN Vietnam
   12 ranges for VU Vanuatu
    3 ranges for WF Wallis and Futuna
   14 ranges for WS Samoa
   18 ranges for YE Yemen
   14 ranges for YT Mayotte
  453 ranges for ZA South Africa
   44 ranges for ZM Zambia
   45 ranges for ZW Zimbabwe

[fisher74]

Вполне может быть.

Код: [Выделить]

ls /usr/share/xt_geoip/LE/CN.*что кажет?

[riondi]

вот что выдает:

/usr/share/xt_geoip/LE/CN.iv0

[fisher74]

Вас ничего не смущает?

[riondi]

я понимаю, разница есть iv4/iv0. Но уже не понимаю, как решить, так как, даже делая по этой статье: http://panoptus.mk.ua/linux/iptables-linux/%D0%B1%D0%B0%D0%BD%D0%B8%D0%BC-%D0%BA%D0%B8%D1%82%D0%B0%D0%B9%D1%86%D0%B5%D0%B2-%D0%B2-iptables-%D0%B1%D0%B5%D0%B7-%D0%BD%D0%B0%D0%B3%D1%80%D1%83%D0%B7%D0%BA%D0%B8-%D0%B4%D0%BB%D1%8F-%D0%BF%D1%80 ошибка не пропала.

[fisher74]

Видимо у Вас скомпилировался "протухший" модуль и загрузился
А после установки из указанной мной статьи модуль не подменился.
lsmod просмотрите

[riondi]

Видимо у Вас скомпилировался "протухший" модуль и загрузился
А после установки из указанной мной статьи модуль не подменился.
lsmod просмотрите

А может есть альтернативные решения бана по странам?

[fisher74]

Я лично не пользуюсь