Live data from Hacker News

Cloudflare misidentifies Hetzner IPs as being located in Iran

gitlab.com

71–80 of 245 posts

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#71
post #39

I'm frequently reminded how thankful I am to live in a country with a strong, positive international reputation. Even ignoring actual quality-of-life stuff associated with where I live - simply not being from a country with a "dodgy" reputation makes many things so much easier. I don't have to think about blocked websites. Companies accept my payments. Couriers ship to me. With my passport, I walk straight to the fro…

It's more that you are on the right side in a unipolar world. When the world shifts to multipolarity in the next few years, the problem will solve itself.

Nah. The other "pole" looks to be China. They aren't going to treat random people from poor countries any better.

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#72
post #63

This is not limited to Cloudflare. Google has the same issue and it turns out the IPs were being used by the Iranian hosting companies connected to internet surveillance but they keep moving around. So far we only observed this in Hetzner German DCs, which is consistent with the news about illicit activities by Iranian companies in Germany, two years ago during the last uprising against the Iranian government (the Wo…

Happened to use with GCP too. We had Oracle Cloud instances being flagged as from Iran and had to file forms with them to get them to not block the IPs.

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#73
post #46

Earlier quoted context omitted.

Unless you happen to not be aligned with or really on the wrong side of that fabled ideal power monopole. It can quickly knock you from ignorance to reality. Imagine Russia was that monopole of power. Or look no further than a dictatorship. Great if your interests align or you're willing to bend them until they do, hell if they don't. The US is the closest thing we have to a monopole these days and I'm sure it's swee…

"According to a 2024 analysis by The Washington Post, 60% of low-income countries were under some form of U.S. financial sanction. The analysis also concluded that the U.S. imposes three times as many sanctions as any other country or international body." - from https://en.wikipedia.org/wiki/United_States_sanctions Really quite ridiculous that there are sanctions on something like 1/3 of the world.

Ridiculous in what sense? Perhaps those low-income countries should get their shit together and stop sponsoring terrorists, introduce multiparty democracy with free elections, allow free-market capitalism, extradite wanted criminals, and adhere to the treaties that they've ratified. The USA is under no obligation to trade with unfriendly countries.

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#74
post #40
post #39

Earlier quoted context omitted.

It's more that you are on the right side in a unipolar world. When the world shifts to multipolarity in the next few years, the problem will solve itself.

Multipolarity is a more dangerous world, as we have seen Russia asserts itself at the expense of Ukraine.

Yes, but "safety" or "peace" is not always desirable. MLK himself said it best: https://kinginstitute.stanford.edu/king-papers/documents/whe...

A short snippet:

> The next day after Autherine was dismissed the paper came out with this headline: 'Things are quiet in Tuscaloosa today. There is peace on the campus of the university of Alabama.' Yes things were quiet in Tuscaloosa. yes there was peace on the campus, but it was peace at a great price. It was peace that had been purchased at the exorbitant price of an inept trustee board succoming to the whims and carprices of a vicious mob. It was peace that had been purchased at the price of allowing mobocracy to reign supreme over democracy. It was peace that had been purchased at the price of the capitulating to the forces of darkness. This is the type of peace that all men of goodwill hate. It is the type of peace that is obnoxious. It is the type of peace that stinks in the nostrils of the almighty God.

Of course, you could either view this sentiment as trivially applying to international politics or so different as to be a category error. But it's enough of an opening to suggest that these loaded terms are not as easily transferrable to ethical context as invested parties might want you to believe. It is difficult for folks to place their values firmly before external pressures when a country is much less empathizable with than an obviously abused person, but I think americans would be surprised at how giving a little might invite a larger revelation about their role in the world stage than desired by the powers that be.

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#75

I'm frequently reminded how thankful I am to live in a country with a strong, positive international reputation. Even ignoring actual quality-of-life stuff associated with where I live - simply not being from a country with a "dodgy" reputation makes many things so much easier. I don't have to think about blocked websites. Companies accept my payments. Couriers ship to me. With my passport, I walk straight to the fro…

I live in a small EU country. There are many, many american sites that just block the whole EU IP ranges becaus they don't want to deal with GDPR.

> they don't want to deal with GDPR

or cannot afford to. add in DSA and DMA as additional burdens.

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#76
post #61

Falsehoods lawyers believe about the Internet: You can identify a person (and their jurisdiction) from “their” IP address.

It's not a falsehood though. IP address is a reasonably reliable means of geolocation. Lawyers tend to be more comfortable with gray areas than engineers. Intent counts for a lot in assessing legal compliance.

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#77
It should be illegal for providers to override the location information provided by the owner of the IP. Hopefully the FTC will look into this abuse. In the real world this would be the equivalent of me putting my shipping address on an order but the store deciding to ship it to some random place because they “believe” that’s my actual address.

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#78
post #8
post #3

I mean, so? Why should it matter where they are located?

My servers ban huge swaths of IPs from certain places that originates enormous amounts of spam, scanners, and other nefarious traffic. It's very effective

If I followed your strategy I would be blocking all of Google. Back in the days I operated my own mail server >50% of all spam was from Google USA... YMMV.

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#79

Earlier quoted context omitted.

"According to a 2024 analysis by The Washington Post, 60% of low-income countries were under some form of U.S. financial sanction. The analysis also concluded that the U.S. imposes three times as many sanctions as any other country or international body." - from https://en.wikipedia.org/wiki/United_States_sanctions Really quite ridiculous that there are sanctions on something like 1/3 of the world.

From that same link, financial sanctions against a country can be one of any of the following: * authority to prohibit U.S. citizens from engaging in financial transactions with the individuals, entities, or governments on the list, except by license from the U.S. government * requiring the United States to oppose loans by the World Bank and other international financial institutions, * diplomatic immunity waived, to…

> the US has so many sanctions because the USD is so powerful

That's appealing to sanctions' effectiveness. It's unclear they are. Instead, they're a potent signalling mechanism that's more palatable than shipping arms or worse, soldiers.

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#80

I'm frequently reminded how thankful I am to live in a country with a strong, positive international reputation. Even ignoring actual quality-of-life stuff associated with where I live - simply not being from a country with a "dodgy" reputation makes many things so much easier. I don't have to think about blocked websites. Companies accept my payments. Couriers ship to me. With my passport, I walk straight to the fro…

I live in a small EU country. There are many, many american sites that just block the whole EU IP ranges becaus they don't want to deal with GDPR.

I'm surprised I don't see it more. You can't impose a regulatory burden more troublesome than your traffic is worth
Post reply on HN