Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    pfBlockerNG 3.2.0_4 ?

    Scheduled Pinned Locked Moved pfBlockerNG
    40 Posts 10 Posters 5.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • GertjanG
      Gertjan @michmoor
      last edited by

      @michmoor said in pfBlockerNG 3.2.0_4 ?:

      Is there a way to check to see it working?

      Yep.
      Enter console or SSH, go for option 8 and type

      php -q /root/pkg_check.php
      

      and see the magic happen.
      No mail if there are no updates available.
      Btw : I've adapted this script for a SG-4100 running with 23.01.

      No "help me" PM's please. Use the forum, the community will thank you.
      Edit : and where are the logs ??

      M S M 4 Replies Last reply Reply Quote 1
      • GertjanG Gertjan referenced this topic on
      • M
        michmoor LAYER 8 Rebel Alliance @Gertjan
        last edited by

        @gertjan Works without issues. Thanks for this.

        It even spotted a Firmware upgrade on my 6100

        16:12:33 The following updates are available and can be installed using System > Package Manager:

        Netgate_Firmware_Upgrade: 0.55 ==> 0.56

        Some packages are part of the base system and will not show up in Package Manager. If any such updates are listed below, run pkg upgrade from the shell to install them:

        igmpproxy: 0.3,1 -> 0.3_1,1 [pfSense]
        pfSense-pkg-Netgate_Firmware_Upgrade: 0.55 -> 0.56 [pfSense]
        pfSense-upgrade: 1.0_53 -> 1.0_58 [pfSense]

        Firewall: NetGate,Palo Alto-VM,Juniper SRX
        Routing: Juniper, Arista, Cisco
        Switching: Juniper, Arista, Cisco
        Wireless: Unifi, Aruba IAP
        JNCIP,CCNP Enterprise

        S 1 Reply Last reply Reply Quote 0
        • S
          sgw @michmoor
          last edited by

          Adding this here, because I see this behavior with current 3.2.0_4:
          pfblockerng seems to block things OK, but the counters in the dashboard widget do not increase at all.
          I already reinstalled, restarted etc

          1 Reply Last reply Reply Quote 0
          • S
            sgw @Gertjan
            last edited by

            @gertjan thanks for pointing at that script. Testing it as well, great.

            GertjanG 1 Reply Last reply Reply Quote 0
            • GertjanG
              Gertjan @sgw
              last edited by

              @sgw said in pfBlockerNG 3.2.0_4 ?:

              @gertjan thanks for pointing at that script. Testing it as well, great.

              You mean these :

              dc0884f9-d7fa-4951-b554-0175fff6db17-image.png
              ?

              No "help me" PM's please. Use the forum, the community will thank you.
              Edit : and where are the logs ??

              S 1 Reply Last reply Reply Quote 0
              • S
                sgw @Gertjan
                last edited by

                @gertjan Yes, exactly.

                Checked right now: I see entries in "Firewall - pfBlockerNG - Reports" for "IP Block Stats", but not in the Dashboard Widget. There are some packets shown for DNSBL, but not for IP.

                I have "PRI1" enabled with "Deny Inbound", so yes, there should be blocking (and the blocking seems to work, only the widget "fails"). It's not that important, but somehow wrong anyway, right?

                I also tried to remove and re-add the widget already. Or edit its settings.

                S 1 Reply Last reply Reply Quote 0
                • P
                  pfsjap @Gertjan
                  last edited by

                  @gertjan Thank you for the pkg_check, works great.

                  I'd like to ask about updates, which are part of the of the base system:

                  Some packages are part of the base system and will not show up in Package Manager. If any such updates are listed below, run `pkg upgrade` from the shell to install them:
                  
                  igmpproxy: 0.3,1 -> 0.3_1,1 [pfSense]
                  pfSense-upgrade: 1.0_53 -> 1.0_58 [pfSense]
                  

                  Is it recommended (and safe) practice to update those also?

                  GertjanG 1 Reply Last reply Reply Quote 0
                  • GertjanG
                    Gertjan @pfsjap
                    last edited by

                    @pfsjap

                    Yes,

                    pkg upgrade
                    

                    will do the job.

                    No "help me" PM's please. Use the forum, the community will thank you.
                    Edit : and where are the logs ??

                    1 Reply Last reply Reply Quote 0
                    • MarinSNBM
                      MarinSNB @Gertjan
                      last edited by

                      @gertjan How do I add this script? Do I do it using the Filer package? Would appreciate a snapshot of your configuration. I have already added the needs Cron job for it as you indicated.

                      Thanks much!

                      Netgate 6100 Max pfSense+
                      —>Unifi Aggregation/24 Pro PoE/24 PoE Enterprise switches
                      —> UCK2+
                      —> 3x U6E APs

                      1 Reply Last reply Reply Quote 0
                      • M
                        michmoor LAYER 8 Rebel Alliance @Gertjan
                        last edited by

                        @gertjan Would you happen to know what the pfsense-upgrade package is?
                        I get this message even after i performed my firmware upgrade on the 6100.

                        Installed packages to be UPGRADED:
                                igmpproxy: 0.3,1 -> 0.3_1,1 [pfSense]
                                pfSense-upgrade: 1.0_53 -> 1.0_58 [pfSense]
                        
                        Number of packages to be upgraded: 2
                        
                        46 KiB to be downloaded.
                        
                        Proceed with this action? [y/N]:
                        
                        

                        Firewall: NetGate,Palo Alto-VM,Juniper SRX
                        Routing: Juniper, Arista, Cisco
                        Switching: Juniper, Arista, Cisco
                        Wireless: Unifi, Aruba IAP
                        JNCIP,CCNP Enterprise

                        R GertjanG 2 Replies Last reply Reply Quote 0
                        • R
                          rcoleman-netgate Netgate @michmoor
                          last edited by

                          @michmoor said in pfBlockerNG 3.2.0_4 ?:

                          Would you happen to know what the pfsense-upgrade package is?

                          It is the package that handles all pfSense updates and upgrades.

                          Ryan
                          Repeat, after me: MESH IS THE DEVIL! MESH IS THE DEVIL!
                          Requesting firmware for your Netgate device? https://go.netgate.com
                          Switching: Mikrotik, Netgear, Extreme
                          Wireless: Aruba, Ubiquiti

                          M 1 Reply Last reply Reply Quote 0
                          • M
                            michmoor LAYER 8 Rebel Alliance @rcoleman-netgate
                            last edited by

                            @rcoleman-netgate gotcha. Does it need an upgrade anyway? During the normal package upgrade process via the GUI, I don’t see this option.

                            Firewall: NetGate,Palo Alto-VM,Juniper SRX
                            Routing: Juniper, Arista, Cisco
                            Switching: Juniper, Arista, Cisco
                            Wireless: Unifi, Aruba IAP
                            JNCIP,CCNP Enterprise

                            R 1 Reply Last reply Reply Quote 0
                            • R
                              rcoleman-netgate Netgate @michmoor
                              last edited by

                              @michmoor it includes references needed to provide future updates and upgrades, so yes, it should always be upgraded when it prompts for a change.

                              Ryan
                              Repeat, after me: MESH IS THE DEVIL! MESH IS THE DEVIL!
                              Requesting firmware for your Netgate device? https://go.netgate.com
                              Switching: Mikrotik, Netgear, Extreme
                              Wireless: Aruba, Ubiquiti

                              M 1 Reply Last reply Reply Quote 0
                              • M
                                michmoor LAYER 8 Rebel Alliance @rcoleman-netgate
                                last edited by

                                @rcoleman-netgate is there a way to make that visible via the GUI? Maybe it is but I missed it?
                                For my normal workflow I don’t go into the shell unless I absolutely need to.
                                pkg upgrade isn’t something i have normally done when managing any pfsense but I will add it now.

                                Firewall: NetGate,Palo Alto-VM,Juniper SRX
                                Routing: Juniper, Arista, Cisco
                                Switching: Juniper, Arista, Cisco
                                Wireless: Unifi, Aruba IAP
                                JNCIP,CCNP Enterprise

                                R 1 Reply Last reply Reply Quote 0
                                • R
                                  rcoleman-netgate Netgate @michmoor
                                  last edited by

                                  @michmoor I believe it is part of the regular update checker but I am not an expert, or even an intermediate on this item. @stephenw10 might have your answer.

                                  Ryan
                                  Repeat, after me: MESH IS THE DEVIL! MESH IS THE DEVIL!
                                  Requesting firmware for your Netgate device? https://go.netgate.com
                                  Switching: Mikrotik, Netgear, Extreme
                                  Wireless: Aruba, Ubiquiti

                                  1 Reply Last reply Reply Quote 1
                                  • GertjanG
                                    Gertjan
                                    last edited by Gertjan

                                    @marinsnb said in pfBlockerNG 3.2.0_4 ?:

                                    How do I add this script?

                                    Copy paste in a text editor !

                                    There is a build in text editor in pfSense, I forgot it's name.
                                    There is 'vi' of course, but I'm not going to advise you use that one ;)

                                    edit : found it : is ee, so

                                    ee /root/pkg_check.php
                                    

                                    .....

                                    pkg install nano
                                    

                                    All you need to do now is : how to save a file with nano.
                                    (searching etc is for later)

                                    When nano is installed :

                                    nano /root/pkg_check.php
                                    

                                    and paste (ctrl-V or if you use Putty : right mous click) into the editor.

                                    Ctrl-w to write the file.
                                    Ctrl-x to exit the editor.

                                    No "help me" PM's please. Use the forum, the community will thank you.
                                    Edit : and where are the logs ??

                                    MarinSNBM 1 Reply Last reply Reply Quote 0
                                    • S
                                      sgw @sgw
                                      last edited by

                                      Still no "Packets" in the widget:

                                      580b3cda-99d1-461c-a780-7a5514785336-image.png

                                      But I see packets blocked in the Logs of pfblockerNG.

                                      1 Reply Last reply Reply Quote 0
                                      • GertjanG
                                        Gertjan @michmoor
                                        last edited by

                                        @michmoor said in pfBlockerNG 3.2.0_4 ?:

                                        Installed packages to be UPGRADED:
                                        igmpproxy: 0.3,1 -> 0.3_1,1 [pfSense]
                                        pfSense-upgrade: 1.0_53 -> 1.0_58 [pfSense]

                                        These are 'real' FreeBSD packages that make part of what pfSense is.
                                        True, you won't see them in the classic GUI installed packages list.

                                        and yes, normally, no body will actually 'see' when they are available.
                                        What I do know is that they, eventually, get installed.
                                        When ? Probably when you visit System > Update > Update Settings and/or System > Update > System Update

                                        As soon as I had the possibility to see this list of non-GUI packages, I never had the patience to 'wait and see' if and when they get installed, I just install them from the command line :

                                        pkg upgrade
                                        

                                        No "help me" PM's please. Use the forum, the community will thank you.
                                        Edit : and where are the logs ??

                                        1 Reply Last reply Reply Quote 1
                                        • MarinSNBM
                                          MarinSNB @Gertjan
                                          last edited by

                                          @gertjan thanks!

                                          Netgate 6100 Max pfSense+
                                          —>Unifi Aggregation/24 Pro PoE/24 PoE Enterprise switches
                                          —> UCK2+
                                          —> 3x U6E APs

                                          1 Reply Last reply Reply Quote 0
                                          • M
                                            manilx @Gertjan
                                            last edited by manilx

                                            @gertjan Hi. Installed the script on my 8200. Tried and worked.
                                            I'm not using email for notifications but pushover.
                                            How do I modify the script to use pushover for it's notification:

                                            notify_via_smtp($msg);
                                            

                                            notify_via_pushover($msg); ????

                                            Thx!

                                            Netgate 8200max

                                            GertjanG 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.