Policy Based Routing (PBR) using Germanys CIDR List

Hi all,

I would like to get all traffic which goes to Germany routed over a VPN. I am currently not in Germany, but have a VPN (ProtonVPN) wireguard connection to Germany on my router.

If I reformat this file (around 435kb) to a format I can use with PBR as a filter? I am concerned that the file might be to big and create to many rules in the background.

I would say try and let us know :slight_smile:

If you have curl installed you can upload the file in the pbr app with file:///

I have tested with 20000 items and it takes a few minutes to process but was working

That ("all") is pretty much unachievable. But "get most traffic which goes to Germany routed over a VPN" should be doable.
The problem is that there is no real general, robust, and reliable way to deduce the actual location of an IP address; geoIP is a heuristic, and registrars like RIPE will only tell you essentially from where an applicant came and "what location these IPs should be used from", but that is decidedly different from "from where they are actually used". Triangulation against a number of known locations might help, but once you factor in LEO or GEO links this gets tricky pretty fast as well.

2 Likes

Yeah, maybe I should say Banking, Email (GMX) and public TV libraries (like ARD and ZDF Mediathek) content. I googled there IPs, but couldn't find a good way of doing that.

I tried the domain based policy with wieistmeineip.de but if I do that, wieistmeineip.de still shows my foreign IP not the VPN IP.

See: Policy-Based-Routing (pbr) package discussion - #2475 by egc

1 Like