How to stop maxmind spam to pfsense alert?
-
@MakOwner You can change your update interval. AFAIK they only update the feed monthly anyway. And it won’t work without a license…and maybe https://forum.netgate.com/topic/186065/heads-up-new-suricata-7-0-3-package-is-coming-soon if I’m reading that correctly.
-
Looks like we need another update for pfBlockerNG!
-
You could just sign up for a free license.
-
@NogBadTheBad said in How to stop maxmind spam to pfsense alert?:
You could just sign up for a free license.
Na, take a look at what @SteveITS has "linked".
-
@Bob-Dig The link doesn't work.
I'm running both and get no issues.
Oh see what you mean now:-
https://redmine.pfsense.org/issues/15240
pfBlocker will just need to incorporate sending the accountID.
-
Sorry, Bill deleted the topic in favor of the release notes:
https://forum.netgate.com/topic/186071/suricata-package-v7-0-3-available-here-are-the-release-notes"Special Notice: MaxMind recently changed their API for authentication when downloading updates for the GeoIP2 database. If you use the GeoIP2 option in Suricata, then you must execute a few specific actions to restore the GeoIP2 database download and update process.
...
Enter your MaxMind Account ID in the new field provided above the previous License Key field."I had tried a pfB update after I read that, and didn't have an issue though, so I was a bit confused...
-
I'm not using the IP related stuff, even tried hunting down as many settings as I could to disable updates but it just keeps spamming alerts. :/
-
@MakOwner From what log-file is this exactly? I can't see it (for now).
-
When was this supposed to have changed... Looks like pfblocker updated just fine for me on the 6th of feb
And per maxmind I at least auth with the key on the 9th of feb..
-
@johnpoz I believe the original (Suricata warning) post said January but wasn’t specific.