Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IP-Blocklist

    Scheduled Pinned Locked Moved pfSense Packages
    496 Posts 86 Posters 498.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      tommyboy180
      last edited by

      I have plans to add that in the next version. Not sure when that will be but it's on my to-do list.

      -Tom Schaefer
      SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

      Please support pfBlocker | File Browser | Strikeback

      1 Reply Last reply Reply Quote 0
      • T
        tommyboy180
        last edited by

        iblocklist.com has released a forum spam list and a web-exploit list.

        If you run any type of forum I recommend that you run the forum spam list.

        -Tom Schaefer
        SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

        Please support pfBlocker | File Browser | Strikeback

        1 Reply Last reply Reply Quote 0
        • T
          tommyboy180
          last edited by

          ipblocklist version 2.2 released.

          Added logging to FW log
          changed install process
          Added visual for how many networks/IPs are being blocked

          -Tom Schaefer
          SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

          Please support pfBlocker | File Browser | Strikeback

          1 Reply Last reply Reply Quote 0
          • D
            dlawley
            last edited by

            @tommyboy180:

            ipblocklist version 2.2 released.

            Added logging to FW log
            changed install process
            Added visual for how many networks/IPs are being blocked

            Just installed,

            but not showing ip addresses blocked, going to look for file locations to see if this is a bug or something else missing.  Offhand where are they located?

            2010-08-20_100223.jpg
            2010-08-20_100223.jpg_thumb

            1 Reply Last reply Reply Quote 0
            • T
              tommyboy180
              last edited by

              @dlawley:

              @tommyboy180:

              ipblocklist version 2.2 released.

              Added logging to FW log
              changed install process
              Added visual for how many networks/IPs are being blocked

              Just installed,

              but not showing ip addresses blocked, going to look for file locations to see if this is a bug or something else missing.  Offhand where are they located?

              That is because your list links are wrong. Please read the FAQ on the first post (Q: My list site only give dynamic links to lists…...)
              Example:
              cr_bogon links to http://list.iblocklist.com/files/cr_bogon.gz
              bt_spyware links to http://list11.iblocklist.com/files/bt_spyware.gz

              You need to have the true url to the list. Dynamic links which are used for load balancing is not supported. BTW, I wouldn't use the bogon list if I were you. You will lock yourself out of your pfsense box.

              -Tom Schaefer
              SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

              Please support pfBlocker | File Browser | Strikeback

              1 Reply Last reply Reply Quote 0
              • D
                dlawley
                last edited by

                thank you sir, did the trick.  and all that time I thought….... oh well

                1 Reply Last reply Reply Quote 0
                • D
                  dlawley
                  last edited by

                  ok cool, blocking ips.  But would like to incorporate I-Blocklist subscription list.  Not sure what the proper format might be since a username and id are part of the url.

                  possible?

                  1 Reply Last reply Reply Quote 0
                  • T
                    tommyboy180
                    last edited by

                    @dlawley:

                    ok cool, blocking ips.  But would like to incorporate I-Blocklist subscription list.  Not sure what the proper format might be since a username and id are part of the url.

                    possible?

                    I'm not really sure. My best guess would be to remove all the links you have and just add the subscription list. See if you get the counter to go up. If so then it works, if not then we can try to think of something else. Let me know, I'm curious.

                    -Tom Schaefer
                    SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                    Please support pfBlocker | File Browser | Strikeback

                    1 Reply Last reply Reply Quote 0
                    • P
                      Pistolero
                      last edited by

                      Hi there,

                      I think there might be an incompatibility between IP Blicklist/Country Block and the HAVP antivirus proxy. Every time I start the blocklist(s) HAVP stops proxying and gives an error for every URL. Also, the control buttons to save settings only work on Firefox, Neither IE or Opera can activate them.

                      Hope this helps to quash a bug!

                      1 Reply Last reply Reply Quote 0
                      • T
                        tommyboy180
                        last edited by

                        The IE incompatibility is an issue that I haven't been able to fix yet. Supermule challenged me with fixing it and I was unable to find a fix. If you would like to help, I would appreciate it. The best thing I can say right now is use FF or Chrome, who uses IE or Opera anymore anyway.

                        I will test with HAVP. Thank you for helping out with the project.
                        EDIT: Does HAVP break when you have logging enabled in the package?

                        -Tom Schaefer
                        SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                        Please support pfBlocker | File Browser | Strikeback

                        1 Reply Last reply Reply Quote 0
                        • M
                          mgc6288
                          last edited by

                          @tommyboy180:

                          The IE incompatibility is an issue that I haven't been able to fix yet. Supermule challenged me with fixing it and I was unable to find a fix. If you would like to help, I would appreciate it. The best thing I can say right now is use FF or Chrome, who uses IE or Opera anymore anyway.

                          I use Opera…

                          1 Reply Last reply Reply Quote 0
                          • P
                            Pistolero
                            last edited by

                            @tommyboy180:

                            The IE incompatibility is an issue that I haven't been able to fix yet. Supermule challenged me with fixing it and I was unable to find a fix. If you would like to help, I would appreciate it. The best thing I can say right now is use FF or Chrome, who uses IE or Opera anymore anyway.

                            I will test with HAVP. Thank you for helping out with the project.
                            EDIT: Does HAVP break when you have logging enabled in the package?

                            Thanks for the reply! You know what, I have not tested whether it is the logging part that kills HAVP. I will try today with logging disabled on both your packages to see if HAVP likes that better.

                            1 Reply Last reply Reply Quote 0
                            • T
                              tommyboy180
                              last edited by

                              @mgc6288:

                              @tommyboy180:

                              The IE incompatibility is an issue that I haven't been able to fix yet. Supermule challenged me with fixing it and I was unable to find a fix. If you would like to help, I would appreciate it. The best thing I can say right now is use FF or Chrome, who uses IE or Opera anymore anyway.

                              I use Opera…

                              That made me laugh :)

                              -Tom Schaefer
                              SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                              Please support pfBlocker | File Browser | Strikeback

                              1 Reply Last reply Reply Quote 0
                              • P
                                Pistolero
                                last edited by

                                I tried IP Blocklist without logging enabled and it still broke HAVP. I was sad to have to uninstall IP Block… :-(

                                In other news, however, looks like your Country Block is working fine without interfering with other packages. Only small issue I have seen with it is that it does not start upon boot...

                                Thanks for your software!

                                1 Reply Last reply Reply Quote 0
                                • T
                                  tommyboy180
                                  last edited by

                                  What version of pfsense are you running? Embedded?

                                  Countryblock will start on startup as will IP-Blocklist. Make sure /usr/local/etc/rc.d/countryblock.sh or ipblocklist.sh is there. Check the permissions of the file. I am still testing HAVP compatibility. .

                                  -Tom Schaefer
                                  SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                  Please support pfBlocker | File Browser | Strikeback

                                  1 Reply Last reply Reply Quote 0
                                  • T
                                    tommyboy180
                                    last edited by

                                    atma.es and iblocklist.com now host a list that blocks attackers who try to spy or remotely control others' computers by means such Microsoft remote terminal, SSH, Telnet or shared desktops.
                                    Sites spreading virus, trojans, spyware, exploits, fake identities/agents, DDoS attackers and Port scans are also in the list.

                                    atma url: http://www.atma.es/atma.p2p
                                    iblocklist url: http://list.iblocklist.com/files/tzmtqbbsgbtfxainogvm.gz

                                    The list is updated daily. I recommend that you include this list with your other lists.

                                    -Tom Schaefer
                                    SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                    Please support pfBlocker | File Browser | Strikeback

                                    1 Reply Last reply Reply Quote 0
                                    • P
                                      Pistolero
                                      last edited by

                                      @tommyboy180:

                                      What version of pfsense are you running? Embedded?

                                      Countryblock will start on startup as will IP-Blocklist. Make sure /usr/local/etc/rc.d/countryblock.sh or ipblocklist.sh is there. Check the permissions of the file. I am still testing HAVP compatibility. .

                                      I am running 1.2.3 x86. Lemme check the scripts to see their attributes…

                                      Thanks!

                                      1 Reply Last reply Reply Quote 0
                                      • D
                                        dlawley
                                        last edited by

                                        Currently its not possible, but I did request it or at least let them know reason for asking.  Another challenge to tackle at some point.

                                        @tommyboy180:

                                        @dlawley:

                                        ok cool, blocking ips.  But would like to incorporate I-Blocklist subscription list.  Not sure what the proper format might be since a username and id are part of the url.

                                        possible?

                                        I'm not really sure. My best guess would be to remove all the links you have and just add the subscription list. See if you get the counter to go up. If so then it works, if not then we can try to think of something else. Let me know, I'm curious.

                                        1 Reply Last reply Reply Quote 0
                                        • T
                                          tommyboy180
                                          last edited by

                                          @dlawley:

                                          Currently its not possible, but I did request it or at least let them know reason for asking.   Another challenge to tackle at some point.

                                          @tommyboy180:

                                          @dlawley:

                                          ok cool, blocking ips.  But would like to incorporate I-Blocklist subscription list.  Not sure what the proper format might be since a username and id are part of the url.

                                          possible?

                                          I'm not really sure. My best guess would be to remove all the links you have and just add the subscription list. See if you get the counter to go up. If so then it works, if not then we can try to think of something else. Let me know, I'm curious.

                                          There is a trick I use that you may be able to use for a subscription list. Using Firefox, download the list like normal and save it somewhere temporary. Now in firefox, in the download manager, right click on the downloaded file and click copy download location or url. This is the true URL, try to paste that into the package and see if that works.

                                          -Tom Schaefer
                                          SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                          Please support pfBlocker | File Browser | Strikeback

                                          1 Reply Last reply Reply Quote 0
                                          • X
                                            Xthink
                                            last edited by

                                            If I add several list, can I temporarily disable any of the list if I need to just like peerguardian?

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.