Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Country Block

    Scheduled Pinned Locked Moved pfSense Packages
    691 Posts 79 Posters 762.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mgc6288
      last edited by

      I must be doing something wrong, or am finding the wrong IP of spammed emails.  First, I have nearly every country checked, including the Dominican Republic.  I've still received a few emails and my mail server separates them and lists their IP in the subject line for me.  Recently I found one with an IP of 200.42.239.139 which as stated here:

      http://ip-address-lookup-v4.com/lookup.php?ip=200.42.239.139

      Points to the Dominican Republic.  Am I finding a fake IP from the sender?  Thanks.

      1 Reply Last reply Reply Quote 0
      • S
        Supermule Banned
        last edited by

        Depending on what the spammer uses as relay….

        1 Reply Last reply Reply Quote 0
        • K
          kpa
          last edited by

          Look at the last ip address before your own email server in the received headers, that's the IP address checked by country block.

          1 Reply Last reply Reply Quote 0
          • T
            tommyboy180
            last edited by

            Version 1.4 released.

            Added logging option.
            Added missing country. (India is in the top 10 list)
            Fixed misspellings.
            Changed installation process.

            -Tom Schaefer
            SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

            Please support pfBlocker | File Browser | Strikeback

            1 Reply Last reply Reply Quote 0
            • M
              mgc6288
              last edited by

              @tommyboy180:

              Version 1.4 released.

              Added logging option.
              Added missing country. (India is in the top 10 list)
              Fixed misspellings.
              Changed installation process.

              After some looking around…is the logging feature located under status --> system logs --> Firewall?

              1 Reply Last reply Reply Quote 0
              • T
                tommyboy180
                last edited by

                Yes, system logs -> Firewall.
                I am still working on a way to filter what is logged only by the package. That requires a lvl 67 programmer and I am only lvl 66.

                Right now the only way to tell if something is blocked by the package is to click the red x on the logged event.

                -Tom Schaefer
                SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                Please support pfBlocker | File Browser | Strikeback

                1 Reply Last reply Reply Quote 0
                • D
                  darklogic
                  last edited by

                  Came across some issues. I found you may need to uninstall the 1.3 package and then reboot you system after the uninstall. Then install the new 1.4 package and reboot again. I was not able to get the new version to start until after I did the following. This is just something to try if anyone else happens to get this same issue for what ever reason.

                  Other than that, the package is working great. Good job on implementing the logging. I have a feeling level 67 will soon come about.

                  Thanks again for all the hard work tommyboy180

                  1 Reply Last reply Reply Quote 0
                  • deltaendD
                    deltaend
                    last edited by

                    Thank you for the new version Tommyboy180.

                    1 Reply Last reply Reply Quote 0
                    • T
                      tommyboy180
                      last edited by

                      @deltaend:

                      Thank you for the new version Tommyboy180.

                      Thank you!

                      -Tom Schaefer
                      SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                      Please support pfBlocker | File Browser | Strikeback

                      1 Reply Last reply Reply Quote 0
                      • L
                        louis-m
                        last edited by

                        has anybody got this going on embedded yet? i'm getting hit with terrible spam and this would come in extremely handy.
                        i've changed my embedded to rw, did the install but it still complains. i've tried to create countries.txt etc and they get deleted the minute i try to commit countries in the gui.
                        i'd really appreciate some help with this as i've had to close down my mail server to stop spam coming in (even with spam assasin!)

                        1 Reply Last reply Reply Quote 0
                        • L
                          louis-m
                          last edited by

                          i got it going but could the author or anybody else let me know if i am doing anything wrong or opening a hole as i am not a coder.
                          i simply edited the config file like:

                          $N = count($aCountry);

                          $myFile = "countries.txt";
                          conf_mount_rw();
                          $fh = fopen($myFile, 'w+');
                          $output = "**You selected $N Countries";

                          for($i=0; $i < $N; $i++)
                          {
                          //echo($aCountry[$i] . " ");
                          fwrite($fh, $aCountry[$i] . "\n");
                          conf_mount_rw();
                          }
                          echo("");
                          }
                          }

                          and away it went. it's running ok now. thank you.**

                          1 Reply Last reply Reply Quote 0
                          • T
                            tommyboy180
                            last edited by

                            @louis-m:

                            i got it going but could the author or anybody else let me know if i am doing anything wrong or opening a hole as i am not a coder.
                            i simply edited the config file like:

                            $N = count($aCountry);

                            $myFile = "countries.txt";
                            conf_mount_rw();
                            $fh = fopen($myFile, 'w+');
                            $output = "**You selected $N Countries";

                            for($i=0; $i < $N; $i++)
                            {
                            //echo($aCountry[$i] . " ");
                            fwrite($fh, $aCountry[$i] . "\n");
                            conf_mount_rw();
                            }
                            echo("");
                            }
                            }

                            and away it went. it's running ok now. thank you.**

                            Awesome! You saved me a couple hours on my day off. I will make the changes and commit this in the CountryBlock package and the IPBlocklist package.

                            -Tom Schaefer
                            SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                            Please support pfBlocker | File Browser | Strikeback

                            1 Reply Last reply Reply Quote 0
                            • L
                              louis-m
                              last edited by

                              hey, no probs! thanks for your efforts and what a great package!
                              i still can't get the logging to work (tick box etc) so there must be another bit in there to change to rw

                              think the last bit above is meant to be "ro" instead of "rw"

                              1 Reply Last reply Reply Quote 0
                              • T
                                tommyboy180
                                last edited by

                                The logging uses a feature already built into pfsense. It logs just like anything else, so you logs should show up under the Firewall logs.

                                -Tom Schaefer
                                SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                Please support pfBlocker | File Browser | Strikeback

                                1 Reply Last reply Reply Quote 0
                                • L
                                  louis-m
                                  last edited by

                                  i've edited it again and put the conf_mount_rw(); at the very begining of the php script and the conf_mount_ro(); at the end and it works fine now

                                  conf_mount_rw();

                                  mwexec("touch countries.txt");
                                  //$myFile = "countries.txt";
                                  //$fh = fopen($myFile, 'a+');

                                  if(isset($_POST['formSubmit']))
                                      {
                                  $aCountry = $_POST['formCountry'];

                                  if(isset($_POST['formOutbound']))
                                          {
                                  $output2 = " and Outbound access is BLOCKED.";
                                  exec("touch OUTBOUND");
                                  }
                                          else
                                          {
                                  $output2 = " and Outbound access is ALLOWED.";
                                  exec("rm OUTBOUND");
                                  }

                                  if(isset($_POST['formlogging']))
                                          {
                                  exec("touch logging");
                                  }
                                          else
                                          {
                                  exec("rm logging");
                                  }

                                  if(empty($aCountry))
                                          {
                                  $output = "**You didn't select any Countries.";
                                  exec("rm countries.txt");
                                  }
                                          else
                                          {

                                  $N = count($aCountry);

                                  $myFile = "countries.txt";
                                  $fh = fopen($myFile, 'w+');
                                  $output = "**You selected $N Countries";

                                  for($i=0; $i < $N; $i++)
                                  {
                                  //echo($aCountry[$i] . " ");
                                  fwrite($fh, $aCountry[$i] . "\n");
                                  }
                                  echo("");
                                  }
                                  }
                                  conf_mount_ro
                                  ?>****

                                  1 Reply Last reply Reply Quote 0
                                  • T
                                    tommyboy180
                                    last edited by

                                    Excellent! Great work and thank you.

                                    -Tom Schaefer
                                    SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                    Please support pfBlocker | File Browser | Strikeback

                                    1 Reply Last reply Reply Quote 0
                                    • L
                                      louis-m
                                      last edited by

                                      and what a great peice of code too. that cheeky little bleeder from taiwan is now being blocked good and proper! thank you!

                                      1 Reply Last reply Reply Quote 0
                                      • L
                                        louis-m
                                        last edited by

                                        um….there's a bit of a difference between the full & embedded versions. running on a full version with the same packages eg snort etc, country block runs. with the embedded. it stops after 5 mins. i'll play a bit more i think.

                                        1 Reply Last reply Reply Quote 0
                                        • T
                                          tommyboy180
                                          last edited by

                                          @louis-m:

                                          um….there's a bit of a difference between the full & embedded versions. running on a full version with the same packages eg snort etc, country block runs. with the embedded. it stops after 5 mins. i'll play a bit more i think.

                                          I don't have any experience with embedded so any help is appreciated. I wonder what the difference is, hopefully there is a fix that we can implement.

                                          -Tom Schaefer
                                          SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                          Please support pfBlocker | File Browser | Strikeback

                                          1 Reply Last reply Reply Quote 0
                                          • C
                                            cmb
                                            last edited by

                                            @tommyboy180:

                                            I don't have any experience with embedded so any help is appreciated. I wonder what the difference is, hopefully there is a fix that we can implement.

                                            The only real difference is if you must write to something other than /var you must conf_mount_rw() first and conf_mount_ro() afterwards.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.