A recent CSF (ConfigServer) login alert notification identified Ukraine for a server located in Dallas, TX. When I looked in /var/lib/csf/Geo, this was listed:
Evidently, they had not been updated in a long time!
The release notes for 1.645 mention this:
I am aware of the change made 2+ years ago to MaxMind - needing a license key and have obtained one.
So, is there any mechanism to update the database periodically? I'd like to know if this exists before implementing my own solution.
As a side note, is there any connect between this and AWStats location service?
David
[root@vps Geo]# ls -l
total 15448
-rw------- 1 root root 55 Jul 9 2019 COPYRIGHT.txt
-rw------- 1 root root 0 Jul 9 2019 GeoIP.dat.gz.tmp
-rw------- 1 root root 12089829 Jul 9 2019 GeoLite2-Country-Blocks-IPv4.csv
-rw------- 1 root root 3701966 Jul 9 2019 GeoLite2-Country-Blocks-IPv6.csv
-rw------- 1 root root 0 Feb 7 2020 GeoLite2-Country-CSV.zip.tmp
-rw------- 1 root root 9948 Jul 9 2019 GeoLite2-Country-Locations-en.csv
-rw------- 1 root root 433 Jul 9 2019 LICENSE.txt
-rw------- 1 root root 116 Jul 9 2019 README.txt
Evidently, they had not been updated in a long time!
The release notes for 1.645 mention this:
CustomBuild code has been cleaned up not to use geoipupdate, libmaxmind and lua compiled components. Lua is still installed from OS repositories on RHEL-based systems.
I am aware of the change made 2+ years ago to MaxMind - needing a license key and have obtained one.
So, is there any mechanism to update the database periodically? I'd like to know if this exists before implementing my own solution.
As a side note, is there any connect between this and AWStats location service?
David
Last edited: