Talk:GeoIP
Following to be added to wiki once GeoIP2 is released
Installation
The openfusion repo is required for the updated Geoip V2 db
yum install smeserver-extrarepositories-openfusion signal-event yum-modify config set UnsavedChanges no yum --enablerepo=openfusion install perl-GeoIP2
yum install smeserver-geoip --enablerepo=smecontribs,openfusion
then
geoipupdate -v
signal-event geoip-update
Blocking SPAM by country is IMHO not a very nice solution as you will also blocking legitimate users from these countries.
I think you might be far better of by using blacklists and bayes filtering in combination with the auto-learn feature. This way mail is checked based on their contents and flagged as SPAM. More information on the bayes filtering and autolearn features can be found here:
- http://www.sonoracomm.com/index.php?option=com_content&task=view&id=49&Itemid=32
- http://wiki.contribs.org/Email#Setup_Blacklists_.26_Bayesian_Autolearning
- Cactus 09:03, 12 December 2007 (MST)
==================================
This has more implication other than blocking. It's also tracking & plotting on map. Only the last part has to do with blocking.
Even so, the reality is that not all countries have friendly intentions or have quality standards in their communication law.
Here are my stats for the last month:
# Most Recent Logfile Cumulative Totals # Disposition (plugin) Total Avg/Day Total Avg/Day # ---------------------------------------------------------------------------- # check_badcountries 1414 44% 21665 275083 41% 11943
So, I've been blocking 21665 messages a day. This is a big chunk of messages that never even have to be scanned on a daily basis. The number of complaints I have received are zero.
- kruhm
Nobody complaints if he can't !
your users are not aware of messages they can't read, and the one that send a message from a banned country can only be reject when he tries to mail the admin of the server !
be aware that some versions of geoip will expect databases at another place, here is a modified version of cron part to avoid this :
# Updating the GeoIP database monthly on the 5th at 0:00h. 0 0 5 * * root /usr/bin/wget http://geolite.maxmind.com/download/geoip/database/GeoLiteCountry/GeoIP.dat.gz -O /var/lib/GeoIP/GeoIP.dat.gz; /bin/gunzip -f /var/lib/GeoIP/GeoIP.dat.gz; cp /var/lib/GeoIP/*.dat /usr/share/GeoIP/ 0 0 5 * * root /usr/bin/wget http://geolite.maxmind.com/download/geoip/database/GeoLiteCity.dat.gz -O /var/lib/GeoIP/GeoIPCity.dat.gz; /bin/gunzip -f /var/lib/GeoIP/GeoIPCity.dat.gz; cp /var/lib/GeoIP/*.dat /usr/share/GeoIP/
--Stephdl (talk) 15:01, 11 September 2015 (CEST) Information removed
GeoIP plugin
We need the GeoIP package and the perl interface to the program but this isn't installed on SME Server. We'll have to grab the packages from yum. Yum has access to different public repositories where packages are available. GeoIP is in the epel repository. We'll enable the repository and install them.
yum --enablerepo=epel install perl-Geo-IP
Yum does the magic and knows to install both the program and the interface.
GeoIP database
For the plugin to work we need the GeoIP database. This database is maintained and updated a company called MaxMind. We'll have to download it every month for the Lite version we are using here or pay for their subscription service to be as accurate as possible and download once a week.
The database needs to be in a specific location or it won't work. We'll change to that location.
cd / mkdir /var/lib/GeoIP cd /var/lib/GeoIP
Now we'll get the latest database. The database is also in the repositories but it's outdated. We'll grab the most recent directly from MaxMind.
wget http://geolite.maxmind.com/download/geoip/database/GeoLiteCountry/GeoIP.dat.gz
The database is zipped. We'll have to unzip it.
gunzip GeoIP.dat.gz
Creating a cron-job
We can add a cron-job to automate the monthly process of updating the GeoIP database:
mkdir -p /etc/e-smith/templates-custom/etc/crontab
Now we will add a custom template fragment:
vim /etc/e-smith/templates-custom/etc/crontab/91_Update_GeoIP_db
Add the following to this fragment, this will download and extract the new database every month:
# Updating the GeoIP database monthly on the 5th at 0:00h. 0 0 5 * * root /usr/bin/wget http://geolite.maxmind.com/download/geoip/database/GeoLiteCountry/GeoIP.dat.gz -O /var/lib/GeoIP/GeoIP.dat.gz; /bin/gunzip -f /var/lib/GeoIP/GeoIP.dat.gz
To activate the custom template fragment:
expand-template /etc/crontab
GeoIP qpstmpd plugin
The email receiving component of SME Server is called qpsmtpd. It's great because it allows us to turn plugins on or off or create our own when we need. The GeoIP plugin is already in SME Server but it's turned off. I've created a RPM but it's not in any of the repoitories, it's attached to a bugzilla: 1866 (direct download).
NOTE As of September 5, 2015, the smeserver-geoip package is in the sme8contribs repository. Please refer to the forum issue Re:smeserver-geoip for notes on enabling the repo and downloading the package.
geoip2 for php
the following allows to install geoip2 support for php
of course you will need the db ...
yum install php*-php-maxmind* --enablerepo=epel
Installation: php54-php-maxminddb x86_64 1.4.1-1.el6.remi remi-safe 16 k php55-php-maxminddb x86_64 1.4.1-1.el6.remi remi-safe 16 k php56-php-maxminddb x86_64 1.4.1-1.el6.remi remi-safe 16 k php70-php-maxminddb x86_64 1.4.1-1.el6.remi remi-safe 16 k php71-php-maxminddb x86_64 1.4.1-1.el6.remi remi-safe 16 k php72-php-maxminddb x86_64 1.4.1-1.el6.remi remi-safe 16 k php73-php-maxminddb x86_64 1.4.1-1.el6.remi remi-safe 16 k Installation pour dépendance: libmaxminddb x86_64 1.1.1-5.el6 epel 17 k