On 2019-08-11, at 05:52:16 -0700, Thomas B. Clark wrote:
> I have tried exhaustively to get xt_geoip to match ipv6 addresses, and
> it doesn't.
>
> I believe my configuration is correct, and that the geoip databases
> are set up correctly.  Matching correctly works on ipv4 with an
> equivalent iptables.

There is an endianness mismatch between the ranges in the GeoIP DB and
the addresses when they are compared by xt_geoip.  I will submit a fix.

J.