This repository contains sf-ip-allocs extension to Server Farmer. This particular extension provides a single file, which
can be used independently of Server Farmer, with any other solution as well.
File allocs has a generic shell syntax, and can be directly included into most firewall configuration scripts.
It defines several variables, where each variable contains a list of IP addresses (or ranges) for particular Internet Service Providers, Cloud providers, and some other services.
Example variable:
TPNET="79.184.0.0/13 80.48.0.0/13 83.0.0.0/11"
If you don't have any firewalling solution, please take a look at Server Farmer scriptable firewall (for Linux).
This public repository is actively maintained since Sep 2016. Previously, some of these variables were maintained since 2009, in private repository, as part of commercial solution.
Right now, our plan regarding this repository is to maintain it as long as possible. Also, it will stay free and, as far as possible, without any changes breaking compatibility.
-
Most Internet Service Providers have 2 types of IP allocations:
- for DHCP/NAT/etc. - from which outgoing traffic is directed to other networks (for you, it's incoming traffic)
- for hosting services (web pages, mail servers etc.) and other internal uses
Variables in
allocsfile are related only to the first type. -
There are some global ISP brands in Poland (eg. T-Mobile, Orange). Variables like
ORANGEare related only to their polish branches and polish networks.
INEArefers to the biggest ISP and CATV provider in western Poland, INEA S.A.ECHOSTAR,MAVERICK,EASTWEST,SYSTEMIAPL- local ISP/CATV companies located in Poznań (western Poland)MULTIMEDIA- global polish CATV Multimedia Polska, now part of bigger CATV VectraVECTRA- Vectra itselfUPC- another global polish CATV UPC Polska
In poland, there are 4 major GSM operators with their own networks - all of them are listed below. All the rest are MVNOs, utilizing IP addresses provided by their operator (except for Virgin Mobile Polska, which is not listed here).
PLAY- Play Mobile, P4 Sp. z. o.o.PLUS- Plus GSM Polkomtel Sp. z o.o.TMOBILE- T-Mobile Polska S.A. (previously Era GSM)ORANGE- Orange Polska S.A. (only GSM part of their network, seeTPNETvariable below)
TPNET- the biggest polish ADSL/FTTH network, previously polish national ISP (Telekomunikacja Polska), now part of Orange, but still branded as Neostrada (this variable is only related to ASDL/FTTH part of their network)NETIA- Netia S.A., second biggest global ISP in Poland, their address ranges mix many types of networks (ADSL, broadband, other) - note that many Netia customers have non-Netia IP addresses:- Netia Mobile - uses IP ranges from
PLUS, previouslyPLAY - corporate customers (Netia has many) often use their own IP allocations
- Netia Mobile - uses IP ranges from
SONERAFI- Telia, major ISP in Helsinki and TurkuELISAFI- Elisa, GSM operator deployed in finnish trains
AMAZONAWS- Amazon Web Services (only IP ranges, from which you can expect incoming traffic, and sometimes merged into bigger subnets - the full list includes over 6500 different subnets!)GCLOUD- Google Cloud Platform (only major IP ranges, see this script for the full list)
BITBUCKET_PIPELINES- Bitbucket Pipelines build environments, seeBITBUCKETvariable below
UPTIMEROBOT- UptimeRobot cheap (at least before 2022) website monitoring, that we use since 2016
NONROUTABLE- expands to all local addresses (used only within your LAN)DOCKERONLY- default Docker subnet (see example how to use it)
DEBIAN- Debian - all global addresses + polish mirrorCANONICAL- UbuntuRASPBIAN- Raspbian, currently Raspberry Pi OS - Debian clone for Raspberry Pi hardwareDEVUAN- Devuan - Debian for without systemdPROXMOX- Proxmox VE - commercial hypervisor based on Debian
GITHUB- major Git repository, address ranges related both to web frontend and ssh endpointsBITBUCKET- second most important Git repository, owned by Atlassian (creators of JIRA) - see here for current list; Pipelines addresses are listed in separateBITBUCKET_PIPELINESvariable
NEWRELIC_COLLECTOR- New Relic - addresses required for reporting data from connected servers
SMSAPI- smsapi.pl polish commercial SMS gatewayRARLAB- RAR/WinRAR archiver download site
We are open to add new variables, related to important ISPs or services, and to update existing ones (we have notifications about changes where possible, but still we can miss something). Just create a new issue for us.
| Author: | Tomasz Klim (opensource@tomaszklim.pl) |
| Copyright: | Copyright 2009-2022 Tomasz Klim |
| License: | MIT |
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.