Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IP-Blocklist

    pfSense Packages
    86
    496
    492.9k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mgc6288
      last edited by

      Well I did get an error for bt_level1.gz however when I reloaded pfsense it did state it was running.

      I just went to countryipblocks.net and made a huge list of all the countries I don't need in "IP Range" and saved them to a .txt file and posted on my server.  I added that to IP-Blocklist and it works like a charm.  Now all I am concerned with are a few countries which I will eventually work on the spam levels…

      Most of the spam, as listed, is coming from:

      Korea
      China
      India
      Russia
      Turkey
      Vietnam
      Ukraine
      Brazil
      Venezuela
      Pakistan

      1 Reply Last reply Reply Quote 0
      • M
        m4rcu5
        last edited by

        Even after a reboot of the firewall it did not seem to be running. I also tried smaller lists live level 3. Nut still i cant seem to get it running.
        Is there any way to get some debugging output to see where it goes wrong?

        1 Reply Last reply Reply Quote 0
        • M
          mgc6288
          last edited by

          Here is a question.  I can copy the direct links for the .gz files from iblocklist.com and they work because they are in the format:

          domain:x.x.x.x-x.x.x.x

          I went to countryipblocks.net and made a custom list of all the countries that I didn't need accessing my server and made an "IP Range" and then copied into a .txt file and posted on my own server.  The format for them is:

          x.x.x.x - x.x.x.x

          After adding the link to IP-Blocklist it does say it is running, but the list isn't in the exact format (minus the domain) as the .gz ones.  Is this an issue?  How could one verify this?

          1 Reply Last reply Reply Quote 0
          • T
            tommyboy180
            last edited by

            When the script checks to see if it is running it only verifies that the firewall entry has been made. The package does not verify the format of your lists, if there are errors in the lists then it silently ignores them.

            countryipblocks.net format does not work. Use the country block package.

            To verify your lists are applied cat /usr/local/www/packages/ipblocklist/lists/ipfw.ipfw and see if your IPs are in there.

            Always use the domain:x.x.x.x-x.x.x.x format.

            -Tom Schaefer
            SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

            Please support pfBlocker | File Browser | Strikeback

            1 Reply Last reply Reply Quote 0
            • M
              mgc6288
              last edited by

              @tommyboy180:

              countryipblocks.net format does not work. Use the country block package.

              Classic goof…I had a hunch to check the pfsense packages and this must have recently come out as I didn't see there a month or two ago...  Thanks!

              1 Reply Last reply Reply Quote 0
              • M
                m4rcu5
                last edited by

                Tommy,
                Doe you have any tips on debugging the package?
                I would really like to have it running, but i cant seem to find any clues on why it does not work.
                Or did i miss something, did i have to make a special rule in the firewall with the list of something?

                1 Reply Last reply Reply Quote 0
                • T
                  tommyboy180
                  last edited by

                  Version 2.1 released

                  Fixed pfsense BETA 2 package for x86 and x64. Now runs on all versions of pfsense.

                  Fixed (wlists.txt) not found error.

                  Fixed rare cases of the package not working with large firewall configurations. Thank you netritious!

                  -Tom Schaefer
                  SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                  Please support pfBlocker | File Browser | Strikeback

                  1 Reply Last reply Reply Quote 0
                  • M
                    mgc6288
                    last edited by

                    @tommyboy180:

                    When the script checks to see if it is running it only verifies that the firewall entry has been made. The package does not verify the format of your lists, if there are errors in the lists then it silently ignores them.

                    countryipblocks.net format does not work. Use the country block package.

                    To verify your lists are applied cat /usr/local/www/packages/ipblocklist/lists/ipfw.ipfw and see if your IPs are in there.

                    Always use the domain:x.x.x.x-x.x.x.x format.

                    If I were to save a .gz file on a www server in the format name:x.x.x.x-x.x.x.x and then occasionally updated the .gz in Notepad with IPs I'd like to block, would I need to re-commit / re-add the .gz to IP-Blocklist or is the list auto updated via the www link?

                    1 Reply Last reply Reply Quote 0
                    • T
                      tommyboy180
                      last edited by

                      @mgc6288:

                      If I were to save a .gz file on a www server in the format name:x.x.x.x-x.x.x.x and then occasionally updated the .gz in Notepad with IPs I'd like to block, would I need to re-commit / re-add the .gz to IP-Blocklist or is the list auto updated via the www link?

                      To get the updated .gz on the pfsense box all you would have to do is click "Save/Update". That will re-download the .gz file and re-process it.

                      -Tom Schaefer
                      SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                      Please support pfBlocker | File Browser | Strikeback

                      1 Reply Last reply Reply Quote 0
                      • M
                        mgc6288
                        last edited by

                        @tommyboy180:

                        To get the updated .gz on the pfsense box all you would have to do is click "Save/Update". That will re-download the .gz file and re-process it.

                        Would it make sense, in possibly a future version, to make it where maybe a .gz link can be set to auto update during a certain time frame, i.e. once a day.  My thoughts is to have the .gz file reside on my server and when a spam email comes in I can get the IP address out of the header and simply add it to the .gz file without having to log into pfsense.  Just a thought.

                        1 Reply Last reply Reply Quote 0
                        • T
                          tommyboy180
                          last edited by

                          @mgc6288:

                          @tommyboy180:

                          To get the updated .gz on the pfsense box all you would have to do is click "Save/Update". That will re-download the .gz file and re-process it.

                          Would it make sense, in possibly a future version, to make it where maybe a .gz link can be set to auto update during a certain time frame, i.e. once a day.  My thoughts is to have the .gz file reside on my server and when a spam email comes in I can get the IP address out of the header and simply add it to the .gz file without having to log into pfsense.  Just a thought.

                          The idea has been passed around on this topic here and there. A cron job would do the same thing. Just run /usr/local/etc/rc.d/IP-Blocklist.sh as often as you like.

                          -Tom Schaefer
                          SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                          Please support pfBlocker | File Browser | Strikeback

                          1 Reply Last reply Reply Quote 0
                          • M
                            mgc6288
                            last edited by

                            @tommyboy180:

                            The idea has been passed around on this topic here and there. A cron job would do the same thing. Just run /usr/local/etc/rc.d/IP-Blocklist.sh as often as you like.

                            I guess I'm not familiar enough to do this.  Am I running the .sh file within pfsense to reload the .gz file or is this a command I can set in a .bat file to have pfsense do?  Making it easier with fewer steps is a nice goal.  If a guy can simply edit the .gz then ideally that would be nice.  I can do this with my email server - edit the .dat file and no reloading is necessary.  Either way though, this and your country package are awesome and the main reasons I finally switched to pfsense.  Thank you.

                            1 Reply Last reply Reply Quote 0
                            • T
                              tommyboy180
                              last edited by

                              @mgc6288:

                              @tommyboy180:

                              The idea has been passed around on this topic here and there. A cron job would do the same thing. Just run /usr/local/etc/rc.d/IP-Blocklist.sh as often as you like.

                              I guess I'm not familiar enough to do this.  Am I running the .sh file within pfsense to reload the .gz file or is this a command I can set in a .bat file to have pfsense do?  Making it easier with fewer steps is a nice goal.  If a guy can simply edit the .gz then ideally that would be nice.  I can do this with my email server - edit the .dat file and no reloading is necessary.  Either way though, this and your country package are awesome and the main reasons I finally switched to pfsense.  Thank you.

                              You won't have any benefit with editing the .gz on the pfsense box since this is replaced with the url version every update. Editing the config or settings do not take effect until you click "Save/Update" hence the title of the button. What I suggest is to create a cron job and run IP-Blocklist.sh every hour or even every minute if you like. And just update the url .gz version. This solution only includes 2 steps so I think this is your better and simplest option.

                              -Tom Schaefer
                              SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                              Please support pfBlocker | File Browser | Strikeback

                              1 Reply Last reply Reply Quote 0
                              • M
                                mgc6288
                                last edited by

                                @tommyboy180:

                                You won't have any benefit with editing the .gz on the pfsense box since this is replaced with the url version every update. Editing the config or settings do not take effect until you click "Save/Update" hence the title of the button. What I suggest is to create a cron job and run IP-Blocklist.sh every hour or even every minute if you like. And just update the url .gz version. This solution only includes 2 steps so I think this is your better and simplest option.

                                Well I installed cron and did some research.  I did the following:

                                minute: 0
                                hour: 1
                                mday: *
                                month: *
                                wday: *
                                who: root
                                command: /usr/local/etc/rc.d/IP-Blocklist.sh

                                I figure everyday at 1am should be ok.  Then whenever I update the .gz file it will update the server.

                                1 Reply Last reply Reply Quote 0
                                • T
                                  tommyboy180
                                  last edited by

                                  Excellent. That is the best way to do that.

                                  -Tom Schaefer
                                  SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                  Please support pfBlocker | File Browser | Strikeback

                                  1 Reply Last reply Reply Quote 0
                                  • J
                                    justsomeguy6575
                                    last edited by

                                    Love the addon.  Was wondering if it could add an entry to maybe the firewall log when an ip gets blocked.

                                    1 Reply Last reply Reply Quote 0
                                    • T
                                      tommyboy180
                                      last edited by

                                      I have plans to add that in the next version. Not sure when that will be but it's on my to-do list.

                                      -Tom Schaefer
                                      SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                      Please support pfBlocker | File Browser | Strikeback

                                      1 Reply Last reply Reply Quote 0
                                      • T
                                        tommyboy180
                                        last edited by

                                        iblocklist.com has released a forum spam list and a web-exploit list.

                                        If you run any type of forum I recommend that you run the forum spam list.

                                        -Tom Schaefer
                                        SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                        Please support pfBlocker | File Browser | Strikeback

                                        1 Reply Last reply Reply Quote 0
                                        • T
                                          tommyboy180
                                          last edited by

                                          ipblocklist version 2.2 released.

                                          Added logging to FW log
                                          changed install process
                                          Added visual for how many networks/IPs are being blocked

                                          -Tom Schaefer
                                          SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                          Please support pfBlocker | File Browser | Strikeback

                                          1 Reply Last reply Reply Quote 0
                                          • D
                                            dlawley
                                            last edited by

                                            @tommyboy180:

                                            ipblocklist version 2.2 released.

                                            Added logging to FW log
                                            changed install process
                                            Added visual for how many networks/IPs are being blocked

                                            Just installed,

                                            but not showing ip addresses blocked, going to look for file locations to see if this is a bug or something else missing.  Offhand where are they located?

                                            2010-08-20_100223.jpg
                                            2010-08-20_100223.jpg_thumb

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.