pfBlockerNG-devel v3.2.0 crashing repeatedly on pfSense 23.01

dotOne

After reboot issue persists…

Uncaught ValueError: str_repeat(): Argument #2 ($times) must be greater than or equal to 0 in /usr/local/share/pear/Net/IPv6.php:684

slever

My error seems to have gone away. Reboot perhaps?

NightlyShark

@paoloest I have a suspicion that something is not getting set correctly by the install script from the browser because of a lack of a check for it, or, part of the installer page is not updated in browser (loaded from cache from a previous version)? Maybe try with another browser (one that has never connected to pfsense) or clear cache and cookies in browser? Just a thought.

SteveITS

@paoloest said in pfBlockerNG-devel v3.2.0 crashing repeatedly on pfSense 23.01:

#1 /usr/local/pkg/pfblockerng/pfblockerng_install.inc(40): pfblockerng_get_countries()

Per https://redmine.pfsense.org/issues/13950, will be fixed in v3.2.0_2.

William 0

Out of curiosity….those having issues, did you uninstall pfblocker before the upgrade? If not make sure you do. You will avoid these issues.

paoloest

@william-0
nope, have not installed any package.

Deleted pfblockerng-devel and installed the non-devel, but no change. I hope for next version to fix this

dotOne

@william-0 Unfortunately that is not the case.
I did my other firewalls, removed the package before upgrading and reinstalled afterwards.
Same issue.

Hope this will be resolved quickly

xpxp2002

@dotone said in pfBlockerNG-devel v3.2.0 crashing repeatedly on pfSense 23.01:

After reboot issue persists…

Uncaught ValueError: str_repeat(): Argument #2 ($times) must be greater than or equal to 0 in /usr/local/share/pear/Net/IPv6.php:684

Did you happen to check for any short-form IPv6 addresses or VIPs in your environment? In my post above, it was the collapsed (::) format in some VIPs I had configured that the code didn't like. Expanding those to a full 8 segments resolved the issue for me.

https://forum.netgate.com/post/1087014

dotOne

@xpxp2002 I changed all CARP IPv6 address to full notation.
That did the job.

Although, I see pfBlockerNG inserts an incorrect formatted IPv6 address.
The leading double colon is correct, 2nd part of the address is dotted notation.

Thanks

BBcan177

@dotone I have a fix for this now. Working on packaging this for the next version:

curl -o /usr/local/pkg/pfblockerng/pfblockerng.inc "https://gist.githubusercontent.com/BBcan177/b735258a1267995046aab45aeaedc210/raw"

paoloest

@bbcan177

the new version fixed my issue

thanks a lot. Great and super duper fast job