Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    pfblocker not downloading ASN list

    Scheduled Pinned Locked Moved General pfSense Questions
    18 Posts 6 Posters 2.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      michmoor LAYER 8 Rebel Alliance @johnpoz
      last edited by

      @johnpoz
      Appreciate the assist. Went to your link - https://bgp.tools/as/714#prefixes - I got the prefixes and did a bulk import for the alias.
      Works without issue as a workaround to the issue with pfBlocker.

      Firewall: NetGate,Palo Alto-VM,Juniper SRX
      Routing: Juniper, Arista, Cisco
      Switching: Juniper, Arista, Cisco
      Wireless: Unifi, Aruba IAP
      JNCIP,CCNP Enterprise

      johnpozJ 1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator @michmoor
        last edited by

        @michmoor not sure I would call it an issue with pfblocker - seems more to me an issue with the site that pfblocker uses to get the info ;) But yeah for sure that is a work around until such time that site is fully operational again..

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        J M 2 Replies Last reply Reply Quote 0
        • J
          jrey @johnpoz
          last edited by

          @johnpoz said in pfblocker not downloading ASN list:

          seems more to me an issue with the site that pfblocker uses to get the info

          which is back running as of about 15 minutes ago, albeit still a little sluggish.

          johnpozJ 1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator @jrey
            last edited by

            @jrey I think they are still having major problems..

            I just got this trying to do a search for asn off their main page

            Whoops, looks like something went wrong.

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            J 1 Reply Last reply Reply Quote 0
            • J
              jrey @johnpoz
              last edited by

              @johnpoz

              didn't try that 😊 -
              only tried the api calls and were/are responding (little slower than what I would call "normal" but a response at least) That's all pfblocker uses

              https://api.bgpview.io/asn/714/prefixes

              {"status":"ok","status_message":"Query was successful","data":{"ipv4_prefixes":[{"prefix":"17.0.0.0\/8","ip":"17.0.0.0","cidr":8,"roa_status":"None","name
              
              etc, etc 
              
              johnpozJ 1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator @jrey
                last edited by

                @jrey said in pfblocker not downloading ASN list:

                https://api.bgpview.io/asn/714/prefixes

                yeah that did respond.. Good that they fix the api before the main site ;) But yeah it was a bit sluggish but then it did pop with all the data..

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                fireodoF 1 Reply Last reply Reply Quote 0
                • M
                  michmoor LAYER 8 Rebel Alliance @johnpoz
                  last edited by

                  @johnpoz said in pfblocker not downloading ASN list:

                  not sure I would call it an issue with pfblocker

                  yes you are right :)
                  I do appreciate the help

                  Firewall: NetGate,Palo Alto-VM,Juniper SRX
                  Routing: Juniper, Arista, Cisco
                  Switching: Juniper, Arista, Cisco
                  Wireless: Unifi, Aruba IAP
                  JNCIP,CCNP Enterprise

                  1 Reply Last reply Reply Quote 0
                  • fireodoF
                    fireodo @johnpoz
                    last edited by

                    @johnpoz said in pfblocker not downloading ASN list:

                    @jrey said in pfblocker not downloading ASN list:

                    https://api.bgpview.io/asn/714/prefixes

                    yeah that did respond.. Good that they fix the api before the main site ;) But yeah it was a bit sluggish but then it did pop with all the data..

                    This morning there where again trouble with bgpview ...

                     /usr/local/bin/curl -A "pfSense/pfblocker cURL download agent-ecd69ce851584cc71xxx" -sS1 https://api.bgpview.io/asn/53667/prefixes > /tmp/pfbtemp10_15438 
                    .. Failed to download ASN
                    restore bk file
                    . completed ..
                    

                    (error repeated 5 times)
                    Seems there are some work underway ... I guess ...

                    Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
                    SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
                    pfsense 2.8.0 CE
                    Packages: Apcupsd, Cron, Iftop, Iperf, LCDproc, Nmap, pfBlockerNG, RRD_Summary, Shellcmd, Snort, Speedtest, System_Patches.

                    J 1 Reply Last reply Reply Quote 0
                    • J
                      jrey @fireodo
                      last edited by

                      @fireodo

                      All I can say is that at 01:20:13 Eastern it was working fine

                      .. completed (Download Valid)
                      removing bk file
                      . completed ..

                      and my next scheduled run isn't for a few hours.
                      (yesterday log file showed a couple of ASN's failing,
                      but for the most part ~95% of them they were fine.
                      0 failures in the run earlier today.

                      fireodoF 1 Reply Last reply Reply Quote 0
                      • fireodoF
                        fireodo @jrey
                        last edited by

                        @jrey said in pfblocker not downloading ASN list:

                        All I can say is that at 01:20:13 Eastern it was working fine

                        Ah, OK - thanks!

                        Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
                        SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
                        pfsense 2.8.0 CE
                        Packages: Apcupsd, Cron, Iftop, Iperf, LCDproc, Nmap, pfBlockerNG, RRD_Summary, Shellcmd, Snort, Speedtest, System_Patches.

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.