Re: ipfw syntax clarification

From: Michael Sierchio <kudzu_at_tenebras.com>
Date: Thu, 30 Dec 2021 07:16:45 UTC 
On Wed, Dec 29, 2021 at 11:05 PM Steve O'Hara-Smith <steve@sohara.org>
wrote:

> On Wed, 29 Dec 2021 22:32:20 -0800
> Michael Sierchio <kudzu@tenebras.com> wrote:
>
> > Actual location of IP addresses
> > is something known to the CDNs (Akamai, Cloudflare, AWS, etc.) and is
> > somewhat proprietary.
>
>         Even they only guess based on what they can find out about who
> controls which block,


Not so – the location DB used by the large CDNs are empirical, and based on
RTT of probes which happen all the time from many different geo locations.
It's pretty easy to infer where the targets are.  These are usually ICMP
PINGs in groups of 3 – sometimes they are TCP to a presumably closed port,
expecting a RST.


>
> --
> Steve O'Hara-Smith <steve@sohara.org>
>