When performing log queries, there may be a problem that there are no country flag indicators in the query result or they are shown for some IP addresses but not all.
Information about which country an IP address belongs to is done by sending a query to the CSPN (Clavister Service Provisioning Network). This is similar functionality as used by the IP reputation feature in cOS Core. InControl then writes this information into a file called “countryCode.xml” in the InControl server’s file storage. Each IP has a TTL (Time-To-Live) on how long it should be stored in this file before a new query is needed, the TTL is one week.
In case this functionality is not working as expected, below is a list of some issues that could be the potential cause of the problem.
- Make sure that the machine that the InControl server is installed on can reach a public DNS server, otherwise it will fail to located any of the CSPN server IP addresses.
- Make sure that the Windows firewall is not blocking outgoing connections to the CSPN network (these connections use HTTPS and TCP port 443).
- If the InControl server fails to connect to CSPN to perform country lookup file 5 times for a log query, it will not make more attempts until another log query is performed.
- Try searching for the file called "countryCode.xml" in the file system of the computer running the InControl server. If this file is missing it could be that either any of the above is the issue or that the InControl server software may be unable to create the file. This might be due to a problem with access/write permissions, lack of disk space, or a disk hardware fault.
No related articles found.