Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Country Block

    Scheduled Pinned Locked Moved pfSense Packages
    691 Posts 79 Posters 763.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      Supermule Banned
      last edited by

      But after I click the whitelist icon, do nothing and then returns to the "main" page, it works…....:?

      1 Reply Last reply Reply Quote 0
      • T
        tommyboy180
        last edited by

        I have tested and tested today. I can't replicate your issue.

        I started on a fresh install and everything is fine. I tested on Beta 2 and 1.2.3.

        -Tom Schaefer
        SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

        Please support pfBlocker | File Browser | Strikeback

        1 Reply Last reply Reply Quote 0
        • S
          Supermule Banned
          last edited by

          Does it create the whitelist pr default or is it allready in the package before it starts?

          1 Reply Last reply Reply Quote 0
          • T
            tommyboy180
            last edited by

            It touches it so the file is created when the package is installed.

            -Tom Schaefer
            SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

            Please support pfBlocker | File Browser | Strikeback

            1 Reply Last reply Reply Quote 0
            • S
              Supermule Banned
              last edited by

              Can you verify that it actually does that??

              I had to do it manually.

              1 Reply Last reply Reply Quote 0
              • D
                DigitalJer
                last edited by

                I had the same error, and persistence paid off.  I don't recall if it started working after a reboot, or 'Commit Countries" did it, but keep trying…  Not very helpful, I know :(  ...but in the end it's OK.

                –------------------------------------------------
                2.4.3-RELEASE (amd64)
                built on Mon Mar 26 18:02:04 CDT 2018
                FreeBSD 11.1-RELEASE-p7
                VM in ESXi 5.5
                1 x 1000baseTX (WAN)
                1 x 1000baseTX (LAN)

                1 Reply Last reply Reply Quote 0
                • chpalmerC
                  chpalmer
                  last edited by

                  @DigitalJer:

                  I had the same error, and persistence paid off.  I don't recall if it started working after a reboot, or 'Commit Countries" did it, but keep trying…  Not very helpful, I know :(  ...but in the end it's OK.

                  I clicked through the "whitelist" and was finally able to make it work.

                  :)

                  Triggering snowflakes one by one..
                  Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                  1 Reply Last reply Reply Quote 0
                  • ?
                    Guest
                    last edited by

                    After I updated everything worked fine. I added some entries to the whitelist and then removed them latter. I could not get the package to start again after that. I removed the package numerous times and rebooted, and contuniued to get the same error as everyone is listing. I finally added those IP's back to the whitelist and I was able to get it to start up again.

                    I believe you can reproduce this issue by installing the package.

                    Adding some IP's to the white list.

                    Remove the IP's

                    Uninstall the package

                    Then reinstall it.

                    1 Reply Last reply Reply Quote 0
                    • T
                      tommyboy180
                      last edited by

                      Darklogic82,

                      That helped me locate the issue.
                      I have found the fix for this. And will be updating the package here shortly. Thank you.

                      -Tom Schaefer
                      SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                      Please support pfBlocker | File Browser | Strikeback

                      1 Reply Last reply Reply Quote 0
                      • S
                        Supermule Banned
                        last edited by

                        ;)

                        1 Reply Last reply Reply Quote 0
                        • T
                          tommyboy180
                          last edited by

                          Update pushed.

                          Uninstall, and re-install please.

                          -Tom Schaefer
                          SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                          Please support pfBlocker | File Browser | Strikeback

                          1 Reply Last reply Reply Quote 0
                          • M
                            mgc6288
                            last edited by

                            I all of a sudden keep getting the error:

                            /tmp/rules.debug:115: cannot load "/usr/local/www/packages/ipblocklist/lists/ipfw.ipfw": No such file or directory

                            Any ideas?  This started, possibly coincidentally, after trying to enable both the country and the ip blocklists simultaneously.

                            EDIT: Well I kind of answered my own question.  When I removed all the .gz links from within ip-blocklist then all of a sudden the country block loaded just fine.  Is it possible to have both on at the same time, or for some reason not a good idea?

                            1 Reply Last reply Reply Quote 0
                            • T
                              tommyboy180
                              last edited by

                              They are both designed to work together if both are installed. I run both packages without a problem.

                              I know the error you pasted. I have gotten that error many time myself. Disabling IP-blocklist and re-enabling it usually helps.

                              -Tom Schaefer
                              SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                              Please support pfBlocker | File Browser | Strikeback

                              1 Reply Last reply Reply Quote 0
                              • S
                                Supermule Banned
                                last edited by

                                Done :) No errors!

                                1 Reply Last reply Reply Quote 0
                                • ?
                                  Guest
                                  last edited by

                                  So far seems to be working good. Also thanks for the whitelist feature. That really helps me a lot.

                                  One other thing or request if you ever get free time to do so, I was wondering if you could make a log section that would either dump to the firewall log or maybe just within the package itself that would show the IP's that are being blocking by specificly the Country Block package?

                                  Currently I don't believe the blocks show up in the firewall logs for either a block or whitelist pass.

                                  Then down the road maybe the logging could generate reports on the CIDRS and pin-point a list of attacks and blocks from the countries and the IP's they belong to.

                                  Thanks for all your hard work on this package. As far as running the IP-Block and Country Block together, all seems to work well.

                                  Again Thanks,

                                  Matt

                                  1 Reply Last reply Reply Quote 0
                                  • T
                                    tommyboy180
                                    last edited by

                                    That actually sounds like a good idea. I will start work immediately.

                                    -Tom Schaefer
                                    SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                    Please support pfBlocker | File Browser | Strikeback

                                    1 Reply Last reply Reply Quote 0
                                    • S
                                      samus
                                      last edited by

                                      Excellent work Tom, this package is wonderfull, but sometimes when I've forbidden countries like Pakistan my access was stopped (I live in France), but it's not a problem at the moment.

                                      The idea to see with the firewall log the country where is situated the IP is wonderfull and with this your package will be perfect  :P

                                      Thanks again Tom !

                                      1 Reply Last reply Reply Quote 0
                                      • H
                                        HoTWiReZ
                                        last edited by

                                        First off, thank you for creating this package.  It is very helpful to me in dealing with the worst spam offenders.

                                        That said, I have noticed a few typos in the country names, and a few missing countries (unless I have missed something myself).  This list is probably not complete, but they are the most recent examples that come to mind for me.

                                        Typos: 
                                        Burkia Faso –> Burkina Faso
                                        Argentia --> Argentina

                                        Missing countries:
                                        Montenegro
                                        India

                                        Again, thank you for creating this!

                                        1 Reply Last reply Reply Quote 0
                                        • D
                                          darklogic
                                          last edited by

                                          HoTWiReZ

                                          WOW and I mean 01010111 01001111 01010111

                                          tommyboy180, you be the man…

                                          1 Reply Last reply Reply Quote 0
                                          • deltaendD
                                            deltaend
                                            last edited by

                                            Tommyboy, this is one of the most useful packages I have installed so far.  You sir, have made my life worth living again. :)

                                            Although, I really hate the idea that someday these type of blocks will become more common where we just get sick of countries who have such a high fraud profile that we simply block the entire country, I have to admit that since I never to ANY business with about 90% of them that I don't feel bad about personally blocking them.  I can, however, imagine a world of elitists where we block internet traffic from the majority of the developing world due to endless waves of spam and sniffing.

                                            I guess the burden of this future will be more in the hands of those who prosecute the developing world's abuses rather than those who defend their equipment against it.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.