Google blocked in outbount.txt

[gpz1100]

142.250.189.4
142.250.189.14
142.250.190.10
142.250.190.46
142.250.190.74
142.250.190.78
142.250.190.110
142.250.190.142
142.250.191.132
142.250.191.142
142.250.191.163
142.250.191.170
142.250.191.174
142.250.191.177
142.250.191.195
142.250.191.196
142.250.191.198
142.250.191.228
142.250.191.238

These all belong to google and appear to be blocked. Various google services not working as a result.

[Rush-er]

142.250.189.4 142.250.189.14 142.250.190.10 142.250.190.46 142.250.190.74 142.250.190.78 142.250.190.110 142.250.190.142 142.250.191.132 142.250.191.142 142.250.191.163 142.250.191.170 142.250.191.174 142.250.191.177 142.250.191.195 142.250.191.196 142.250.191.198 142.250.191.228 142.250.191.238

These all belong to google and appear to be blocked. Various google services not working as a result.

This should help for now, please report.
49d2d13

Will try to implement exclusion also for major services like Google and Microsoft

[gpz1100]

How do I implement this? Pfblocker is pointed to https://github.com/bitwire-it/ipblocklist/raw/refs/heads/main/outbound.txt, which appears to still contain those ip's, at least at the time of this writing.

[Rush-er]

The action did a refresh 7f9d4f1
can you test now ?

[gpz1100]

Yes, google services are accessible now.

I imagine there are some google services hosting malicious content. How to differentiate without breaking legit google (or ms) services?

[Rush-er]

Yes, google services are accessible now.

I imagine there are some google services hosting malicious content. How to differentiate without breaking legit google (or ms) services?

It's not that easy.. i will keep this open so anyone can reply with ideas

[Edelskjold]

You could do a reverse lookup on the ip, to determine if its being using inside Google Cloud platform, or its used by Google itself.

This would of course use a lot of ressources to check this, but its the only way I found to be sure not to block any of Googles services (or other providers like Microsoft)

[inventorematto]

Hello guys,
i've experimented some new blocks on google services, check the screen below :-)

other google ips appears to be blocked aswell.

at the moment i was forced to disisable the blocklist. i'll check again enablint it only for mysefl.

thanks for your time and effort!

[gpz1100]

142.251.150.119/32
142.251.151.119/32
142.251.152.119/32
142.251.153.119/32
142.251.154.119/32
142.251.155.119/32
142.251.156.119/32
142.251.157.119/32
185.70.42.41/32
216.239.32.223/32

Agreed. Have a bunch of firewall entries from this evening 1800 (gmt -0500) update.

Edit: I too had to disable this as it was breaking all sorts of google services and too cumbersome to figure out what to whitelist.

[iJorgen]

Same here... The newly added blocklist "Turris" created this chaos. It blocks "geller-pa.googleapis.com" and other critical Google services needed by Google/Nest-devices and Android stuff. Also Hope it can be removed again, since it's full of false positives.

Also noticed it blocks Proton Mail/Calendar.

Found these so far, but could be more:
142.251.38.74
185.70.42.41
216.239.32.223
216.239.34.223
216.239.36.223
216.239.38.223

[Rush-er]

Thanks for the reports, i reverted the changes to the outbound
be5df8f