cross-posted from: https://leminal.space/post/24911246

I’ll be self-hosting a service with user submissions soon, so I’m worried about the https://howto.geoblockthe.uk/ situation.

Based on this I’ve wondered, are there any community maintained geo block lists that might be useful? All database options I found are either 1. an on-demand online service which seems questionable for privacy reasons, or 2. IPv4 only, or 3. have weird terms of use with a gag clause regarding the entire company making it and other weird stuff.

I’m not a fan of geo blocking in general, but the situation is what it is.

PS: Please don’t discuss the Online Safety Act itself too much in the comments, or whether somebody should be using a geo ip to handle this. While I might appreciate useful input on that, I’m hoping this post can remain a resource for those who are looking for such a database for other reasons as well.

  • ell1eOP
    link
    fedilink
    English
    arrow-up
    3
    ·
    3 months ago

    So is it only me, or wouldn’t it be possible to write a script that 1. gets the ASN list from some place like here https://bgpview.io/reports/countries/GB and then 2. queries the list of IP ranges from here https://www.enjen.net/asn-blocklist/index.php?asn=&type=iplist and 3. commits that to a repository on Github or such, and the script could be rerun every two weeks or so? It seems like there are no terms of use attached to any of these two services that forbid this, but does anybody know?

    • Toes♀@ani.social
      link
      fedilink
      arrow-up
      2
      ·
      3 months ago

      Theoretically, you could do it in real-time and cache it.

      I think it would be important to check the API rules of w/e service you’re using.

      https://www.enjen.net/asn-blocklist/readme.php#api

      Some CDNs I believe can already do it like cloudflare. But I havn’t tested it myself, but I have seen ASN block pages through them in the past.

      • ell1eOP
        link
        fedilink
        English
        arrow-up
        2
        ·
        3 months ago

        Real time is a privacy risk.

        check the API rules

        That was what I was wondering about above. For Bgpview I can’t find much.