Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    pfBlockerNG-devel v3.1.0_19/10

    Scheduled Pinned Locked Moved
    pfBlockerNG
    17
    77
    15.3k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • cmcdonaldC
      cmcdonald Netgate Developer @renegade
      last edited by

      @renegade

      Sorry, try this:

      pkg info "py*" unbound

      Need help fast? https://www.netgate.com/support

      N 1 Reply Last reply Reply Quote 0
      • N
        nimrod @cmcdonald
        last edited by

        @cmcdonald said in pfBlockerNG-devel v3.1.0_19/10:

        @renegade

        Sorry, try this:

        pkg info "py*" unbound

        Here it is:

        [2.6.0-RELEASE][admin@pfSense.home.arpa]/root: pkg info "py*" unbound
py38-ply-3.11
py38-setuptools-57.0.0
py39-maxminddb-2.0.3
py39-setuptools-57.0.0
py39-sqlite3-3.9.9_7
python38-3.8.12_1
python39-3.9.9
unbound-1.13.2
        cmcdonaldC 2 Replies Last reply Reply Quote 0
        • cmcdonaldC
          cmcdonald Netgate Developer @nimrod
          last edited by

          @nimrod Thanks. I see the problem. Testing a fix. Standby

          Need help fast? https://www.netgate.com/support

          1 Reply Last reply Reply Quote 2
          • cmcdonaldC
            cmcdonald Netgate Developer @nimrod
            last edited by

            @nimrod can you also share pkg info unbound ?

            Need help fast? https://www.netgate.com/support

            N 1 Reply Last reply Reply Quote 0
            • N
              nimrod @cmcdonald
              last edited by

              @cmcdonald said in pfBlockerNG-devel v3.1.0_19/10:

              @nimrod can you also share pkg info unbound ?

              Of course. Here it is:

              [2.6.0-RELEASE][admin@pfSense.home.arpa]/root: pkg info unbound
unbound-1.13.2
Name           : unbound
Version        : 1.13.2
Installed on   : Mon Jan 31 21:24:27 2022 CET
Origin         : dns/unbound
Architecture   : FreeBSD:12:amd64
Prefix         : /usr/local
Categories     : dns
Licenses       : BSD3CLAUSE
Maintainer     : jaap@NLnetLabs.nl
WWW            : https://www.nlnetlabs.nl/projects/unbound
Comment        : Validating, recursive, and caching DNS resolver
Options        :
	DEP-RSA1024    : off
	DNSCRYPT       : off
	DNSTAP         : off
	DOCS           : off
	DOH            : on
	ECDSA          : on
	EVAPI          : off
	FILTER_AAAA    : off
	GOST           : on
	HIREDIS        : off
	LIBEVENT       : on
	MUNIN_PLUGIN   : off
	PYTHON         : on
	SUBNET         : off
	TFOCL          : off
	TFOSE          : off
	THREADS        : on
Shared Libs required:
	libexpat.so.1
	libnghttp2.so.14
	libpython3.8.so.1.0
	libevent-2.1.so.7
Shared Libs provided:
	libunbound.so.8
Annotations    :
	FreeBSD_version: 1203500
	build_timestamp: 2022-01-12T15:27:10+0000
	built_by       : poudriere-git-3.3.99.20211130
	cpe            : cpe:2.3:a:nlnetlabs:unbound:1.13.2:::::freebsd12:x64
	port_checkout_unclean: no
	port_git_hash  : 8df9544dcbab
	ports_top_checkout_unclean: yes
	ports_top_git_hash: 7046b65c0d41
	repo_type      : binary
	repository     : pfSense
Flat size      : 7.99MiB
Description    :
Unbound is designed as a set of modular components, so that also
DNSSEC (secure DNS) validation and stub-resolvers (that do not run as
a server, but are linked into an application) are easily possible.

Goals:
    * A validating recursive DNS resolver.
    * Code diversity in the DNS resolver monoculture.
    * Drop-in replacement for BIND apart from config.
    * DNSSEC support.
    * Fully RFC compliant.
    * High performance, even with validation enabled.
    * Used as: stub resolver, full caching name server, resolver library.
    * Elegant design of validator, resolver, cache modules.
          o provide the ability to pick and choose modules.
    * Robust.
    * In C, open source: The BSD license.
    * Smallest as possible component that does the job.
    * Stub-zones can be configured (local data or AS112 zones).

Non-goals:
    * An authoritative name server.
    * Too many Features.

WWW: https://www.nlnetlabs.nl/projects/unbound
              cmcdonaldC 1 Reply Last reply Reply Quote 1
              • cmcdonaldC
                cmcdonald Netgate Developer @nimrod
                last edited by

                @nimrod Can you now try reinstalling pfBlockerNG-devel on 22.05/2.6, and repeat the above command pkg info "py*" unbound

                Need help fast? https://www.netgate.com/support

                N 1 Reply Last reply Reply Quote 0
                • N
                  nimrod @cmcdonald
                  last edited by

                  @cmcdonald said in pfBlockerNG-devel v3.1.0_19/10:

                  @nimrod Can you now try reinstalling pfBlockerNG-devel on 22.05/2.6, and repeat the above command pkg info "py*" unbound

                  I reinstalled it and here is the output:

                  [2.6.0-RELEASE][admin@pfSense.home.arpa]/root: pkg info "py*" unbound
py38-maxminddb-2.0.3
py38-ply-3.11
py38-setuptools-57.0.0
py38-sqlite3-3.8.12_7
py39-maxminddb-2.0.3
py39-setuptools-57.0.0
py39-sqlite3-3.9.9_7
python38-3.8.12_1
python39-3.9.9
unbound-1.13.2
                  cmcdonaldC 1 Reply Last reply Reply Quote 0
                  • cmcdonaldC
                    cmcdonald Netgate Developer @nimrod
                    last edited by

                    @nimrod That should be correct now. Clear the unbound errors and try again.

                    Need help fast? https://www.netgate.com/support

                    N B 2 Replies Last reply Reply Quote 2
                    • N
                      nimrod @cmcdonald
                      last edited by

                      @cmcdonald said in pfBlockerNG-devel v3.1.0_19/10:

                      @nimrod That should be correct now. Clear the unbound errors and try again.

                      Yup. That fixed it. Thank you sir.

                      12cce7f0-7c98-4539-a20f-05db798050ae-image.png

                      1 Reply Last reply Reply Quote 1
                      • BBcan177B
                        BBcan177 Moderator @Draco
                        last edited by

                        @draco said in pfBlockerNG-devel v3.1.0_19/10:

                        I had hoped this might let pfBlocker directly download a JSON list like the one found at Microsoft Azure IPs. This is a file I manually download and then use pfSense's GUI CMD interface to upload for pfBlocker (I set the format to AUTO). Ran this on 3.1.0_11 just now.

                        The Link you posted is the HTML page. You need to use the direct link:

                        https://download.microsoft.com/download/7/1/D/71D86715-5596-4529-9B13-DA13A5DE5B63/ServiceTags_Public_20230123.json

                        Keep in mind that this will parse all IPs in the json file. You could also create a new shell script to parse this JSON and get more refinement on which IPs to pull ( "Advanced Tunables - Post-Script Script" feature.)

                        "Experience is something you don't get until just after you need it."

                        Website: http://pfBlockerNG.com
                        Twitter: @BBcan177  #pfBlockerNG
                        Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                        D 1 Reply Last reply Reply Quote 0
                        • Y
                          yorke @BBcan177
                          last edited by

                          @bbcan177

                          I figure out why i was getting those errors some package/feature on pfsense needed to be update (ie unbound and about 4 others ) once I ran the update and reboot and reinstall
                          PfblockerNG work, no more errors.
                          Thanks BBcan177

                          1 Reply Last reply Reply Quote 0
                          • B
                            bigjohns97 @cmcdonald
                            last edited by

                            @cmcdonald I am seeing the same error about missing python modules on 23.01 RC, was this fixed on that version as well?

                            N 1 Reply Last reply Reply Quote 0
                            • N
                              nimrod @bigjohns97
                              last edited by

                              @bigjohns97 said in pfBlockerNG-devel v3.1.0_19/10:

                              @cmcdonald I am seeing the same error about missing python modules on 23.01 RC, was this fixed on that version as well?

                              Yes.

                              B 1 Reply Last reply Reply Quote 0
                              • D
                                Draco @BBcan177
                                last edited by

                                @bbcan177 said in pfBlockerNG-devel v3.1.0_19/10:

                                he Link you posted is the HTML page. You need to use the direct link:
                                https://download.microsoft.com/download/7/1/D/71D86715-5596-4529-9B13-DA13A5DE5B63/ServiceTags_Public_20230123.json

                                Fair enough -- this means I will need to manually update the link each time, but better than copying the file from my computer up to pfSense each time, thanks!

                                I might have to write a screen-scraper to pull the latest URL off the download page...

                                D 1 Reply Last reply Reply Quote 0
                                • B
                                  bigjohns97 @nimrod
                                  last edited by

                                  @nimrod Can you confirm what add-on's I should see because they differ than what is posted above.

                                  pkg info "py*" unbound

                                  py311-maxminddb-2.2.0_2
                                  py311-setuptools-63.1.0
                                  py311-sqlite3-3.11.1_8
                                  py39-libzfs-1.1.2022081600
                                  py39-setuptools-63.1.0
                                  py39-yaml-5.4.1
                                  python311-3.11.1_1
                                  python39-3.9.15
                                  unbound-1.17.0

                                  N 1 Reply Last reply Reply Quote 0
                                  • N
                                    nimrod @bigjohns97
                                    last edited by

                                    @bigjohns97

                                    Is this before or after pfblocker reinstall ?

                                    B 1 Reply Last reply Reply Quote 0
                                    • B
                                      bigjohns97 @nimrod
                                      last edited by

                                      @nimrod After

                                      N 1 Reply Last reply Reply Quote 0
                                      • N
                                        nimrod @bigjohns97
                                        last edited by

                                        @bigjohns97

                                        I just noticed you are on Plus version of pfsense. The output that i shared is from CE edition.

                                        B 1 Reply Last reply Reply Quote 0
                                        • B
                                          bigjohns97 @nimrod
                                          last edited by

                                          @nimrod That wouldn't matter, the difference between 2.6/22.x and 2.7/23.x is really what I am trying to confirm was fixed.

                                          @BBcan177 builds the pfblockerng code but I believe netgate dev's such as @cmcdonald are who associate package prerequisites and manage how the actual package is presenting in package manager.

                                          This is why my original question was to @cmcdonald as to whether his fix he did in this thread was also applied to the new 2.7/23.x branch.

                                          cmcdonaldC 1 Reply Last reply Reply Quote 0
                                          • cmcdonaldC
                                            cmcdonald Netgate Developer @bigjohns97
                                            last edited by

                                            @bigjohns97

                                            Report the output of

                                            pkg info unbound

                                            ldd `which unbound`

                                            pkg info py*

                                            Need help fast? https://www.netgate.com/support

                                            B 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post