I’m having trouble accessing an IPFire server, and after trying to figure out why I’ve lost console connectivity, I see that if I set the firewall rule to “Source → Location (Spain),” I lose access.
I checked the IPFire Location Service, and it says that even though it’s a Spanish network, it’s locating me in Brazil???
Restricting access based on geolocation is becoming increasingly unreliable.
I know of cases where mobile operators operating in Europe use addresses assigned to North Africa.
I had a similar case where the geolocation definition blocked North Africa but actually blocked a portion of the European mobile operator’s network.
This is why this database is not called “IPFire Geolocation”. Geolocation has never been reliable, the main purpose is something else. In IPFire the implementation is mainly around some cheap grouping together of clients. That does not have to be 100% perfect.