Issues when exclude range of Google Assistant Server's IPs.

[stbeep1]

I want to exclude the range of Google Assistant Server's IP address that are logged everytime.

I want to exclude a range of IPs. Is that possible?

[stbeep1]

My HA server: Version core-2021.1.5 Channel: stable Deployment: production Running Hass.io on a Pi4 (2GB of RAM) Let me know if u need more information. Thanks!

[DavidFW1960]

I have these excluded. They are published by Google. I only use IPv6 so I excluded

• 2001:4860:4000::/36 # Google in the authenticated config. You just need to lookup the IPv4 ones and exclude them.

[stbeep1]

I have these excluded. They are published by Google. I only use IPv6 so I excluded

  - 2001:4860:4000::/36      # Google

in the authenticated config. You just need to lookup the IPv4 ones and exclude them.

How do u find those Google assistant IP address? It's it from a trusted source? Thanks.

[DavidFW1960]

Google it… like I said Google publishes their IP address ranges… they are not secret..

[stbeep1]

Google it… like I said Google publishes their IP address ranges… they are not secret..

Did you find Google assistant server's IP address from Google's official website? Cloud you please paste the URL here, thanks! I can only find it through some unknown website. 😢

[stbeep1]

Seems like there is a problem using exclude: (Google iP). Here is my code, when I put exclude: (Google iP) in my configuration.yaml file. Then I check config and restart my HA server. After that, I use ProtonVPN to access my HA server (from the HA app)(a few time on different IP/ different city). I waited for 1 hour and I didn't receive any login notifications (notifications inside the HA dashboard). I have checked that if I remove exclude: (Google iP), and restarted my HA server, notifications will work. Am I doing anything wrong with exclude: (Google iP)? Thank you. Here is my code (/config/configuration.yaml)

[DavidFW1960]

apart from indenting and not putting in the -'s? This is my config:

# Authentication Sensor
  - platform: authenticated
    enable_notification: true
    exclude:
      - !secret my_ipv4_network
      - fd00::/8
      - !secret zerotier_network
      - !secret my_ipv6_network
      - 2001:4860:4000::/36      # Google

[stbeep1]

apart from indenting and not putting in the -'s? This is my config:

# Authentication Sensor
  - platform: authenticated
    enable_notification: true
    exclude:
      - !secret my_ipv4_network
      - fd00::/8
      - !secret zerotier_network
      - !secret my_ipv6_network
      - 2001:4860:4000::/36      # Google

This is my new config. (screenshot)

I have followed your instructions. Then I check config and restart my HA server. After that, I use ProtonVPN to access my HA server (from the HA app)(a few time on different IP/ different city). I waited for a few minutes and I didn't receive any login notifications at all. (notifications inside the HA dashboard). Do you know why?

[stbeep1]

My HA logs: There are no new issues! HA Channel: stable Deployment: production Authenticated version: latest stable release from HACS

[DavidFW1960]

what does the file .ip_authenticated.yaml show? Have you enabled debug mode for the component? Mine is working as expected here.

[DavidFW1960]

assuming yoy enabled logging as per the instructions?

logger:
  default: warn  #warn
  logs:
    custom_components.sensor.authenticated: debug

[stbeep1]

what does the file .ip_authenticated.yaml show? Have you enabled debug mode for the component? Mine is working as expected here.

I deleted all text in .ip_authenticated.yaml before I restart my HA server. And I run the test again, still I don't get any notifications at all. Why ?

[stbeep1]

Here is how I run the test and the result. I check config and restart my HA server. After that, I use ProtonVPN to access my HA server (from the HA app)(a few time on different IP/ different city). I waited for 30 sec and I didn't receive any login notifications (notifications inside the HA dashboard). I also use Surfshark VPN as an additional test, still I get the same result

I Verify that my ip address was changed every time

[DavidFW1960]

DO YOU HAVE DEBUG LOGGING ENABLED AS PER MY POST????????

[stbeep1]

DO YOU HAVE DEBUG LOGGING ENABLED AS PER MY POST????????

Yes I did

[DavidFW1960]

Are you getting entries in the yaml file? Do you use a reverse proxy?

[stbeep1]

Inside logs, I get this xtime WARNING (MainThread) [homeassistant.loader] You are using a custom integration for hacs which has not been tested by Home Assistant. This component might cause stability problems, be sure to disable it if you experience issues with Home Assistant.

[DavidFW1960]

that warning is standard for custom components

[stbeep1]

that warning is standard for custom components

I only saw that logs. There's nothing else.

[DavidFW1960]

Are you getting entries in the yaml file? Do you use a reverse proxy?

[stbeep1]

Are you getting entries in the yaml file? Do you use a reverse proxy?

What do you mean by entries in the yaml file? also, I am not sure what is a reverse proxy, but I use duckdns.

[DavidFW1960]

I deleted all text in .ip_authenticated.yaml before I restart my HA server. And I run the test again, still I don't get any notifications at all. Why ?

[stbeep1]

I deleted all text in .ip_authenticated.yaml before I restart my HA server. And I run the test again, still I don't get any notifications at all. Why ?

Yes I did that, just for testing purpose

[DavidFW1960]

ARE THERE ANY ENTRIES IN IT!!!!!

[stbeep1]

Yes there is ENTRIES in /config/.ip_authenticated.yaml. I see a lot.

[DavidFW1960]

So then the component is recording new IP addresses... just not notifying you?

[stbeep1]

So then the component is recording new IP addresses... just not notifying you?

Yes

[DavidFW1960]

It will only notify the first time it gets a new address... it won't notify for ones it has seen before

[stbeep1]

I know that, so I use ProtonVPN to get a new address everytime I run the test.

[stbeep1]

Here is how I run the test and the result. I check config and restart my HA server. After that, I use ProtonVPN to access my HA server (from the HA app)(a few time on different IP/ different city). I waited for 30 sec and I didn't receive any login notifications (notifications inside the HA dashboard). I also use Surfshark VPN as an additional test, still I get the same result

I Verify that my ip address was changed every time

It will only notify the first time it gets a new address... it won't notify for ones it has seen before

[DavidFW1960]

do you have a sensor to display the last IP in lovelace?

            entities:
              - sensor.last_successful_authentication

[stbeep1]

Yes I have

[DavidFW1960]

I Verify that my ip address was changed every time

doesn't mean it never saw that one before though

So that sensor should show you a multi coloured bar chart (different band for every new auth I only have one here cos I'm on my LAN at the moment but the other day when I was out I was getting other addresses

[stbeep1]

doesn't mean it never saw that one before though

No, I can verify that my ip address was changed every time, beacuse I will copy my IP address everytime I connect to a vpn server, I drop down the IP address to Notepad++.

[DavidFW1960]

Please answer the question! What does the sensor show?

[stbeep1]

Please answer the question! What does the sensor show?

It shows my VPN location ip address (Proton VPN)

[DavidFW1960]

does the time match the last login/auth time?

[stbeep1]

Yes

[DavidFW1960]

is it always the same ip address from Proton?

[stbeep1]

By the way I use duckdns to access my HA server when I am outside or inside my network, does it affect authenticated notifications?

[DavidFW1960]

no duckdns has nothing to do with it If you use a reverse proxy it will never show the 'real' ip address either (unless you set the proxy up right)

Maybe try this

http:
  use_x_forwarded_for: true

in configuration.yaml

[stbeep1]

is it always the same ip address from Proton?

No

[stbeep1]

http:
  use_x_forwarded_for: true

May I ask what's this code for ?

[DavidFW1960]

Normally with a proxy it will reveal the true IP address of an incoming connection instead of the IP address of the proxy.

[stbeep1]

Normally with a proxy it will reveal the true IP address of an incoming connection instead of the IP address of the proxy.

I don't use any proxy.

[stbeep1]

http:
  use_x_forwarded_for: true

@DavidFW1960 May I ask what's this code for ?

[DavidFW1960]

I answered that the first time you asked it yesterday. Did you try it?

[stbeep1]

I answered that the first time you asked it yesterday. Did you try it?

http: use_x_forwarded_for: true

Tried, still not getting notifications!

[phixion]

Google it… like I said Google publishes their IP address ranges… they are not secret..

Did you find Google assistant server's IP address from Google's official website? Cloud you please paste the URL here, thanks! I can only find it through some unknown website. 😢

you can pull that from:

curl --dns-servers 8.8.8.8 https://www.gstatic.com/ipranges/cloud.json

or

dig @8.8.8.8 +short txt _cloud-netblocks.googleusercontent.com | sed 's/"//g; s/ip4://g; s/ip6://g;' | tr ' ' '\n' | grep include | cut -d ':' -f2 | xargs dig @8.8.8.8 +short txt | sed 's/"//g; s/ip4://g; s/ip6://g;' | tr ' ' '\n' | grep '/'

and then narrow it down to your needs/location, which makes the json probably the better choice to work with