diff --git a/CMakeLists.txt b/CMakeLists.txt
index faaff66b46c57d473c9688d7140d9fc56462b59d..168f93aded06bf8cb64e3b4170debde3082b3e3f 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -8,7 +8,7 @@ set(CMAKE_C_STANDARD 11)
 SET( CPACK_PACKAGE_NAME  "${PROJECT_NAME}")
 SET( CPACK_PACKAGE_VERSION_MAJOR 3)
 SET( CPACK_PACKAGE_VERSION_MINOR 4)
-SET( CPACK_PACKAGE_VERSION_PATCH 2)
+SET( CPACK_PACKAGE_VERSION_PATCH 3)
 
 # init CellFrame SDK
 add_definitions("-DDAP_VERSION=\"${CPACK_PACKAGE_VERSION_MAJOR}\"")
diff --git a/cellframe-sdk b/cellframe-sdk
index 9e6250106d117236154f276d15b2d1cdd3c41baf..ead0d836ae6e0dfab5f754058b0baac630520384 160000
--- a/cellframe-sdk
+++ b/cellframe-sdk
@@ -1 +1 @@
-Subproject commit 9e6250106d117236154f276d15b2d1cdd3c41baf
+Subproject commit ead0d836ae6e0dfab5f754058b0baac630520384
diff --git a/dist/share/configs/cellframe-node.cfg.tpl b/dist/share/configs/cellframe-node.cfg.tpl
index 5478754c919642f2f092cf2bbd007a9a4b7ded37..b883c596fa599158c3e2e0b04217aea43803d711 100755
--- a/dist/share/configs/cellframe-node.cfg.tpl
+++ b/dist/share/configs/cellframe-node.cfg.tpl
@@ -14,6 +14,8 @@ auto_online={AUTO_ONLINE}
 enabled={SERVER_ENABLED}
 listen_address={SERVER_ADDR}
 listen_port_tcp={SERVER_PORT}
+news_url_enabled=false
+bugreport_url_enabled=false
 
 # Builtin DNS server
 [dns_server]
@@ -29,7 +31,7 @@ pricelist=[]
 # Automaticaly true if master node
 #auto_proc=false
 
-# Central Dataase
+# Central Database
 [cdb]
 enabled=false
 servers_list_enabled=false
@@ -49,6 +51,7 @@ registration_open=true
 [srv_vpn]
 #   Turn to true if you want to share VPN service from you node
 enabled=false
+geoip_enabled=false
 #   List of loca security access groups. Built in: expats,admins,services,nobody,everybody
 network_address=10.11.12.0
 network_mask=255.255.255.0
@@ -69,6 +72,7 @@ threads_cnt=0
 pid_path=/opt/cellframe-node/var/run/cellframe-node.pid
 log_file=/opt/cellframe-node/var/log/cellframe-node.log
 wallets_path=/opt/cellframe-node/var/lib/wallet
+geoip_db_path=share/geoip/GeoLite2-City.mmdb
 ca_folders=[/opt/cellframe-node/var/lib/ca,/opt/cellframe-node/share/ca]
 dap_global_db_path=/opt/cellframe-node/var/lib/global_db
 dap_global_db_driver=cdb
diff --git a/sources/main.c b/sources/main.c
index cdae133fa1a2cddb530be684e693068a1e167bca..4b26985e0d1a712509d642f88c7a749a52f5e543 100755
--- a/sources/main.c
+++ b/sources/main.c
@@ -81,6 +81,7 @@
 #include "dap_chain_net_srv_datum.h"
 #include "dap_chain_net_bugreport.h"
 #include "dap_chain_net_news.h"
+#include "dap_chain_net_srv_geoip.h"
 
 #ifdef DAP_OS_LINUX
 #include "dap_chain_net_srv_vpn.h"
@@ -330,10 +331,16 @@ int main( int argc, const char **argv )
     // vpn client
     if(dap_chain_net_vpn_client_init(g_config) != 0) {
         log_it(L_ERROR, "Can't init dap chain network service vpn client");
-        return -71;
+        return -72;
     }
 #endif
 
+    if(dap_config_get_item_bool_default(g_config, "srv_vpn", "geoip_enabled", false)) {
+        if(chain_net_geoip_init(g_config) != 0) {
+            log_it(L_CRITICAL, "Can't init geoip module");
+            return -73;
+        }
+    }
 
 	if ( enc_http_init() != 0 ) {
 	    log_it( L_CRITICAL, "Can't init encryption http session storage module" );
@@ -415,7 +422,7 @@ int main( int argc, const char **argv )
             }
 
             // News URLs
-            bool l_news_url_enabled = dap_config_get_item_bool_default(g_config, "server", "l_news_url_enabled", false);
+            bool l_news_url_enabled = dap_config_get_item_bool_default(g_config, "server", "news_url_enabled", false);
             if(l_news_url_enabled) {
                 dap_chain_net_news_add_proc(DAP_HTTP(l_server));
             }