Re: Determining Physical location of machines (satellites)

[Michael Puchol <mpuchol () sonar-security com>]

Hi Kevin,

What satellite network is the server/user using to connect? Some 
networks use GPS receivers embedded in all the earth segment terminals 
in order to improve performance, and provide emergency location 
services. Some also restrict usage based on what your GPS is telling 
them (i.e. no phone calls from Iraq, etc.).

If you are using GlobalStar, the satellite constellation itself can 
determine a terminal's location to within 10km, by using reverse-GPS 
type algorithms on the terminal's radio signals, so no GPS required 
here. I'm not sure if a third party can locate a terminal or access this 
location information.

If it's a VSAT using a geostationary comms satellite (not Inmarsat, but 
one of the many TV/data sats that are now offering satellite internet), 
then the satellite's footprint combined with the IP the client is give 
can be used to somewhat guess what side of the world they're on.

It will all depend on the particular network that is being used.

Best regards,

Mike


Kevin Willock wrote:
> To further up this question, is there any method of determining the true 
> location of a server/user behind a satelite uplink connection? I have 
> contemplated some BGP or AS methods but have not formalized any game 
> plans. Does anyone have any practical experience in this area?
>
> -Kevin
>
> Kevin Barzdaitis wrote:
>
> > Hello, all!
> >
> > I have a situation here where specific services shall be offered ONLY to
> > specific countries. I think of blocking all IP addresses (on the 
> > firewall)
> > for specific servers and allowing only IP ranges by Country. I was 
> > wondering
> > if there exists publicly available list of "Country to IP ranges". I was
> > only able to find "IP to Country" mappings, but i need to check every
> > address specifically.
> >
> > Thanks!
> >
> >