SOLVED CPANEL-37321 - cPHulk Countries Management Updates

[bluedogranch]

Hi,
I want to use Countries Management to blacklist various countries, but my question is this: how often does cPHulk update the IP lists to block?

IP block allocations change daily, and there is the possibility that an IP range blocked by cPHulk will be transferred to a county that is not blocked, or verse vice, so someone using Countries Management may end up with IPs blocked that they do not want blocked.

So how often does cPHulk update the IP lists to block? How are the IP blocks updated? is there a script that downloads the new IP blocks from the IP list providers?

Thanks

 

[rscalover]

Hello,

What is your goal exactely ? cpHulk will not prevent people in countries you block to connect to your server or send emails to your server that is not the purpose of cphulk .

Maxmind Geoip is your friend there are tools available to convert there database to the old *.dat format.

 

[cPJustinD]

Hello bluedogranch! cPhulk pulls the country IP information from the file located at /usr/local/cpanel/3rdparty/share/geoipfree/IpToCountry.dat.

It appears that the IP information is pulled from the database available at http://software77.net/geo-ip/.

However, we do have an internal case open with our development team, CPANEL-36133, due to an issue we've noticed where the IP information available in that database is not always up-to-date. Unfortunately, we don't have control over when these IPs are updated. However, I believe the intended resolution is to pull from an available database that contains more up-to-date IP information.

I hope that this information helps. If you have any other questions or concerns, please let us know!

Best regards,

 

[bluedogranch]

Hi,
Any update on this? I noticed that software77.net is now gone, as are their IP information files.
How is cPhulk updating the IP data for country management blocklists?
Thanks

 

[cPRex]

@bluedogranch - I've created case CPANEL-38899 with our developers about software77 being unavailable. I'm not sure what the workaround will be, but the security team is aware now. I'll be sure to post updates to this thread as soon as I get them.

 

[cPRex]

Update - our team actually had a case open that I missed when I did my search. That case number is CPANEL-37321 and I'm following along with that now on my end.

 

[cPRex]

Update - our team has a resolution in place in version 102. I haven't yet heard if the fix is able to be backported to older versions. If I get another update I'll be sure to post.

 

[bluedogranch]

You mean Cpanel version 102? And the current release is 98.0.9?

 

[cPRex]

That's correct - cPanel version 102.

 

[bluedogranch]

So when is 102 going to be released?
Why no backport for the current stable release 98? This has been broken for months.

 

[cPRex]

I can't say for sure exactly when 102 will be released. If I had to guess, and please remember this is just a guess, it would be early 2022, as v100 will be going to Current soon.

I spoke with the developers about the backporting options and I'll post an update once I have one.

 

[cPRex]

The developers have let me know that due to the changes involved this isn't suitable for backporting.

 

[bluedogranch]

Ok, for 102, how often will the IP lists be updated? What service is being used for the Country IP lists ?

 

[cPanelAnthony]

Hello! We will have more information about this as cPanel version 102 gets closer to release. I don't have the exact details yet.

 

[sugarrock]

This is causing a huge issue for myself and my users because the current database is very out of date. I need to know how I can manually update the database as well as information on when we can expect a full resolution to this issue. Waiting for version 102 to fix a security feature seems like pretty bad practice. Add to that we don't even have a release date or any information about the fix that was implemented.

 

[tmurdock]

Are there any updates on this? I am have an IP that is currently being blocked, but every geo lookup I do says this IP is located in the United States and should not be blocked due to the US being whitelisted.

 

[cPRex]

@tmurdock - have you updated your server to version 102? We fixed this in the first release of version 102 as outlined here:

https://support.cpanel.net/hc/en-us/articles/4419341672727

 

[tmurdock]

@tmurdock - have you updated your server to version 102? We fixed this in the first release of version 102 as outlined here:

https://support.cpanel.net/hc/en-us/articles/4419341672727

I will update the server tonight. Unfortunately I can't access that link as it says I have invalid credentials.

Thanks!

 

[cPRex]

Since the support article is related to a case, you do have to be signed in to our ticket system in order to see that. That lets you "follow" the case and receive updates if there are any changes.