20
/e/OS sending requests to iran (lemmy.world)
submitted 2 months ago by to c/e_os@lemmy.world
13 comments fedilink hide all child comments
 

Hi, I was messing with rethink dns to see what was its possibilities. then I saw this "surprise". Is this a normal behaviour ? Do we know what it does ? Does anyone has observed this on its phone ?

Edit : got an answer on eOS forum, it confirms what you guys told me :

rethink uses ipinfo lite (db-ip.com before) - their info atm says germany. it’s a hetzner ip anyway. If you trace the network path you’ll see it’s their fsn1 datacenter.

incorrect display of GeoIP data · Issue #2499 · celzero/rethink-app · GitHub

It looks like there could be a bug in how Rethink “searches” IP ranges to geo location… Rethink doesn’t use the mmdb format, but pre-processes the csv (code) to make it “searchable”.

Thank you all for your help :)

you are viewing a single comment's thread
view the rest of the comments
[–] 14 points 2 months ago (4 children)

One thing to keep in mind is geo IP mapping are best effort.
Look at anything to do with Azure. It always shows the IP as US no matter where you deployed your stuff.

Yes, it could be going to Iran, it could also be someone has purchased address space and haven't updated the geo IP databased yet.
Could also be someone fat fingered their own IP block and the databases are wrong.
We has that happen to us in Australia, someone fat fingered their adjacent address block and suddenly our Australian block was showing up as Chinese.

  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
  • [–] [S] 4 points 2 months ago (2 children)

    Ok, so there are "simple" explanations about that. That's a bit reassuring. I've blocked the "ntfy" app with rethink until I had news. It doesn't seem to block anything vital for the system.

    Thanks for the answer :).

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 3 points 2 months ago (1 child)

    ntfy is a client for the UnifiedPush protocol, an OSS alternative to Google's firebase cloud messaging. It provides push notifications for compatible apps, this way instead of having each app wake up periodically to check for updates over the network, only one app (ntfy) keeps running the background and wakes the appropriate app when it gets a new push.

    I've never used /e/OS but given the URL in your screenshot I guess murena uses UnifiedPush to send push notifications to its system apps. Blocking it may prevent you from getting system update notifications and such.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •