Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    pfblocker not downloading ASN list

    Scheduled Pinned Locked Moved General pfSense Questions
    18 Posts 6 Posters 2.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      jrey @michmoor
      last edited by

      @michmoor
      Not an issue with the size, - the API only pulls the prefixes for the given ASN so there is no issue downloading an ASN in this regard.
      On their side, the ASN's are sync'd almost instantly when the ranges (prefixes) are changed upstream.

      Their "Mock Servers" are current responding as expected, but as noted the production servers are currently in a bad state.

      Dashboard is showing the failures here as I would expect in cases like this, and nothing bad happens, just continues to use the previous values.

      Screen Shot 2024-02-29 at 9.33.01 AM.png

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator @michmoor
        last edited by

        @michmoor I was able to get to https://bgp.tools/as/714#prefixes

        But man did it take a while..

        And via api url still showing a 500 error..

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        M 1 Reply Last reply Reply Quote 0
        • M
          michmoor LAYER 8 Rebel Alliance @johnpoz
          last edited by

          @johnpoz
          Appreciate the assist. Went to your link - https://bgp.tools/as/714#prefixes - I got the prefixes and did a bulk import for the alias.
          Works without issue as a workaround to the issue with pfBlocker.

          Firewall: NetGate,Palo Alto-VM,Juniper SRX
          Routing: Juniper, Arista, Cisco
          Switching: Juniper, Arista, Cisco
          Wireless: Unifi, Aruba IAP
          JNCIP,CCNP Enterprise

          johnpozJ 1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator @michmoor
            last edited by

            @michmoor not sure I would call it an issue with pfblocker - seems more to me an issue with the site that pfblocker uses to get the info ;) But yeah for sure that is a work around until such time that site is fully operational again..

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            J M 2 Replies Last reply Reply Quote 0
            • J
              jrey @johnpoz
              last edited by

              @johnpoz said in pfblocker not downloading ASN list:

              seems more to me an issue with the site that pfblocker uses to get the info

              which is back running as of about 15 minutes ago, albeit still a little sluggish.

              johnpozJ 1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator @jrey
                last edited by

                @jrey I think they are still having major problems..

                I just got this trying to do a search for asn off their main page

                Whoops, looks like something went wrong.

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                J 1 Reply Last reply Reply Quote 0
                • J
                  jrey @johnpoz
                  last edited by

                  @johnpoz

                  didn't try that 😊 -
                  only tried the api calls and were/are responding (little slower than what I would call "normal" but a response at least) That's all pfblocker uses

                  https://api.bgpview.io/asn/714/prefixes

                  {"status":"ok","status_message":"Query was successful","data":{"ipv4_prefixes":[{"prefix":"17.0.0.0\/8","ip":"17.0.0.0","cidr":8,"roa_status":"None","name
                  
                  etc, etc 
                  
                  johnpozJ 1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator @jrey
                    last edited by

                    @jrey said in pfblocker not downloading ASN list:

                    https://api.bgpview.io/asn/714/prefixes

                    yeah that did respond.. Good that they fix the api before the main site ;) But yeah it was a bit sluggish but then it did pop with all the data..

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    fireodoF 1 Reply Last reply Reply Quote 0
                    • M
                      michmoor LAYER 8 Rebel Alliance @johnpoz
                      last edited by

                      @johnpoz said in pfblocker not downloading ASN list:

                      not sure I would call it an issue with pfblocker

                      yes you are right :)
                      I do appreciate the help

                      Firewall: NetGate,Palo Alto-VM,Juniper SRX
                      Routing: Juniper, Arista, Cisco
                      Switching: Juniper, Arista, Cisco
                      Wireless: Unifi, Aruba IAP
                      JNCIP,CCNP Enterprise

                      1 Reply Last reply Reply Quote 0
                      • fireodoF
                        fireodo @johnpoz
                        last edited by

                        @johnpoz said in pfblocker not downloading ASN list:

                        @jrey said in pfblocker not downloading ASN list:

                        https://api.bgpview.io/asn/714/prefixes

                        yeah that did respond.. Good that they fix the api before the main site ;) But yeah it was a bit sluggish but then it did pop with all the data..

                        This morning there where again trouble with bgpview ...

                         /usr/local/bin/curl -A "pfSense/pfblocker cURL download agent-ecd69ce851584cc71xxx" -sS1 https://api.bgpview.io/asn/53667/prefixes > /tmp/pfbtemp10_15438 
                        .. Failed to download ASN
                        restore bk file
                        . completed ..
                        

                        (error repeated 5 times)
                        Seems there are some work underway ... I guess ...

                        Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
                        SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
                        pfsense 2.8.0 CE
                        Packages: Apcupsd, Cron, Iftop, Iperf, LCDproc, Nmap, pfBlockerNG, RRD_Summary, Shellcmd, Snort, Speedtest, System_Patches.

                        J 1 Reply Last reply Reply Quote 0
                        • J
                          jrey @fireodo
                          last edited by

                          @fireodo

                          All I can say is that at 01:20:13 Eastern it was working fine

                          .. completed (Download Valid)
                          removing bk file
                          . completed ..

                          and my next scheduled run isn't for a few hours.
                          (yesterday log file showed a couple of ASN's failing,
                          but for the most part ~95% of them they were fine.
                          0 failures in the run earlier today.

                          fireodoF 1 Reply Last reply Reply Quote 0
                          • fireodoF
                            fireodo @jrey
                            last edited by

                            @jrey said in pfblocker not downloading ASN list:

                            All I can say is that at 01:20:13 Eastern it was working fine

                            Ah, OK - thanks!

                            Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
                            SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
                            pfsense 2.8.0 CE
                            Packages: Apcupsd, Cron, Iftop, Iperf, LCDproc, Nmap, pfBlockerNG, RRD_Summary, Shellcmd, Snort, Speedtest, System_Patches.

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.