MaxMind GeoLite2 Databases now need an account

[philh]

I guess you are aware of this, or soon will be when you get back from your holidays, but an account is now required to use the free MaxMind GeoLite2 databases.

https://blog.maxmind.com/2019/12/18/sig ... databases/

You will see errors like the following in lfd.log

CCL Error: Unable to retrieve GeoLite2 Country database [http://geolite.maxmind.com/download/geo ... ry-CSV.zip] - Unable to download: Can't connect to geolite.maxmind.com:80 (Name or service not known)

[ForumAdmin]

Thank you for posting this.

We have released a new version of csf which addresses this issue (thanks MaxMind):
https://blog.configserver.com

[philh]

Thanks for your quick response to this despite the timing!

[philh]

This is probably rather obvious, but you have to restart csf/lfd for it to read csf.conf and find the valid key.

[p4guru]

Thank you for posting this.

We have released a new version of csf which addresses this issue (thanks MaxMind):
https://blog.configserver.com

is it possible to temporarily override and download the GeoLite2 databases from an older local mirror of last Dec 24, 2019 database version ? maxmind sign up page gives me 'sorry, we are not able to provide with an account' message when i try to sign up.

[ForumAdmin]

There's no way to do that in csf.

If you have another server already configured from before the switchover with necessary the files in:

Code: Select all

/var/lib/csf/Geo/*
/var/lib/csf/zone/*

You could then copy those to the server that does not have them.

[ForumAdmin]

Note: We are actively looking into adding an alternative to the MaxMind databases because of this forced development in the near future.

[neige]

Hi,
I signed up and got a valid serial that I added to csf.conf as per instructions and now the lfd alerts for ssh failures are complete again. TY for the help. Furthermore I warmly do not advise, having tried it out on a test Plesk Centos 7;server NOT TO update to latest GeoIP version as they suggest on the MaxMind website. Current Centos 7 GeoIP package is version 2.5.0 and it's installed with BIND DNS package and if you try install the new one, you need to remove the old one and you break BIND DNS.
BR

[p4guru]

There's no way to do that in csf.

If you have another server already configured from before the switchover with necessary the files in:

Code: Select all

/var/lib/csf/Geo/*
/var/lib/csf/zone/*

You could then copy those to the server that does not have them.

Thanks for that info, then I'd need to set CC_INTERVAL = "14" to much longer duration or will CC_INTERVAL = "0" disable the database update check ?

Note: We are actively looking into adding an alternative to the MaxMind databases because of this forced development in the near future.

Yeah it's troublesome indeed. Only other alternative I am aware of is ip2location ? Both my Nginx geoip2 nginx module and CSF use maxmind. But I am aware Nginx has an older ip2location nginx module, so would be a good fit I suppose for CSF Firewall too ?

[philh]

The last set of files available for download without a licence are available at archive.org. Don't know how easy it would be to use these in csf.

https://forum.matomo.org/t/maxmind-is-c ... es/35439/3