Problem with CO ?

[Arnaudduluoz]

Hello,

Wishing to add Colombia to my list, I get the following error:

sudo geo-nft

dim. 05 juin 2022 12:04:42 CEST

Geolocation for nftables v2.2.7

bash version 5.1.4(1)-release

nftables v0.9.8 (E.D.S.)

The latest database csv file already exists locally; using existing file:
/etc/nftables/geo-nft/dbip-country-lite-2022-06.csv

Creating country-specific nftables sets...

Creating a list of all country codes found in the database csv file.

Generating nftables geolocation sets in:
/etc/nftables/geo-nft/countrysets

This may take a moment, please wait...

Some countries may only have IPv4 addresses or IPv6 addresses.

No IPv4 addresses in database for country code BV, skipping...
No IPv4 addresses in database for country code CX, skipping...
No IPv4 addresses in database for country code EH, skipping...
No IPv4 addresses in database for country code HM, skipping...
No IPv4 addresses in database for country code SH, skipping...

Country set creation complete...

Checking for settings in /etc/nftables/geo-nft/refill-sets.conf
Settings found and imported successfully.
Automatically generating /etc/nftables/geo-nft/refill-sets.nft

Refilling updated country-specific sets by running the script:
/etc/nftables/geo-nft/refill-sets.nft
In file included from /etc/nftables/geo-nft/refill-sets.nft:13:1-46:
/etc/nftables/geo-nft/countrysets/CO.ipv4:499:2-28: Error: conflicting intervals specified
	181.128.0.0-181.159.255.255,
	^^^^^^^^^^^^^^^^^^^^^^^^^^^
/etc/nftables/geo-nft/refill-sets.nft:20:1-198: Error: Could not process rule: File exists
add element inet filter geo-imap2 { $RU.ipv4, $BY.ipv4, $HK.ipv4, $TW.ipv4, $CN.ipv4, $BR.ipv4, $CO.ipv4, $UA.ipv4, $BY.ipv4, $IN.ipv4, $CO.ipv4, $PK.ipv4, $QA.ipv4, $IR.ipv4, $KP.ipv4, $KR.ipv4, }
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

geo-nft.sh v2.2.7:
	Refilling geolocation sets failed.
	See 'systemctl status nftables' and 'journalctl -xe' for details.

Do you have any idea of where it could come from ?

Thanks for your help,

Best regards,

Arnaudduluoz

[wirefalls]

Hello,

Check the list of country codes that you're specifying in refill-sets.conf and remove any duplicates. Country codes BY.ipv4 and CO.ipv4 appear to have been repeated in your list. Hopefully that gets things working, please let me know if you continue to have issues.

Thanks

[Arnaudduluoz]

Thank you very much... I didn't pay attention that those countries were already in the list... Sorry for filing a request for such a silly thing!