IP-Blocklist
-
ok cool, blocking ips. But would like to incorporate I-Blocklist subscription list. Not sure what the proper format might be since a username and id are part of the url.
possible?
-
ok cool, blocking ips. But would like to incorporate I-Blocklist subscription list. Not sure what the proper format might be since a username and id are part of the url.
possible?
I'm not really sure. My best guess would be to remove all the links you have and just add the subscription list. See if you get the counter to go up. If so then it works, if not then we can try to think of something else. Let me know, I'm curious.
-
Hi there,
I think there might be an incompatibility between IP Blicklist/Country Block and the HAVP antivirus proxy. Every time I start the blocklist(s) HAVP stops proxying and gives an error for every URL. Also, the control buttons to save settings only work on Firefox, Neither IE or Opera can activate them.
Hope this helps to quash a bug!
-
The IE incompatibility is an issue that I haven't been able to fix yet. Supermule challenged me with fixing it and I was unable to find a fix. If you would like to help, I would appreciate it. The best thing I can say right now is use FF or Chrome, who uses IE or Opera anymore anyway.
I will test with HAVP. Thank you for helping out with the project.
EDIT: Does HAVP break when you have logging enabled in the package? -
The IE incompatibility is an issue that I haven't been able to fix yet. Supermule challenged me with fixing it and I was unable to find a fix. If you would like to help, I would appreciate it. The best thing I can say right now is use FF or Chrome, who uses IE or Opera anymore anyway.
I use Opera…
-
The IE incompatibility is an issue that I haven't been able to fix yet. Supermule challenged me with fixing it and I was unable to find a fix. If you would like to help, I would appreciate it. The best thing I can say right now is use FF or Chrome, who uses IE or Opera anymore anyway.
I will test with HAVP. Thank you for helping out with the project.
EDIT: Does HAVP break when you have logging enabled in the package?Thanks for the reply! You know what, I have not tested whether it is the logging part that kills HAVP. I will try today with logging disabled on both your packages to see if HAVP likes that better.
-
The IE incompatibility is an issue that I haven't been able to fix yet. Supermule challenged me with fixing it and I was unable to find a fix. If you would like to help, I would appreciate it. The best thing I can say right now is use FF or Chrome, who uses IE or Opera anymore anyway.
I use Opera…
That made me laugh :)
-
I tried IP Blocklist without logging enabled and it still broke HAVP. I was sad to have to uninstall IP Block… :-(
In other news, however, looks like your Country Block is working fine without interfering with other packages. Only small issue I have seen with it is that it does not start upon boot...
Thanks for your software!
-
What version of pfsense are you running? Embedded?
Countryblock will start on startup as will IP-Blocklist. Make sure /usr/local/etc/rc.d/countryblock.sh or ipblocklist.sh is there. Check the permissions of the file. I am still testing HAVP compatibility. .
-
atma.es and iblocklist.com now host a list that blocks attackers who try to spy or remotely control others' computers by means such Microsoft remote terminal, SSH, Telnet or shared desktops.
Sites spreading virus, trojans, spyware, exploits, fake identities/agents, DDoS attackers and Port scans are also in the list.atma url: http://www.atma.es/atma.p2p
iblocklist url: http://list.iblocklist.com/files/tzmtqbbsgbtfxainogvm.gzThe list is updated daily. I recommend that you include this list with your other lists.
-
What version of pfsense are you running? Embedded?
Countryblock will start on startup as will IP-Blocklist. Make sure /usr/local/etc/rc.d/countryblock.sh or ipblocklist.sh is there. Check the permissions of the file. I am still testing HAVP compatibility. .
I am running 1.2.3 x86. Lemme check the scripts to see their attributes…
Thanks!
-
Currently its not possible, but I did request it or at least let them know reason for asking. Another challenge to tackle at some point.
ok cool, blocking ips. But would like to incorporate I-Blocklist subscription list. Not sure what the proper format might be since a username and id are part of the url.
possible?
I'm not really sure. My best guess would be to remove all the links you have and just add the subscription list. See if you get the counter to go up. If so then it works, if not then we can try to think of something else. Let me know, I'm curious.
-
Currently its not possible, but I did request it or at least let them know reason for asking. Another challenge to tackle at some point.
ok cool, blocking ips. But would like to incorporate I-Blocklist subscription list. Not sure what the proper format might be since a username and id are part of the url.
possible?
I'm not really sure. My best guess would be to remove all the links you have and just add the subscription list. See if you get the counter to go up. If so then it works, if not then we can try to think of something else. Let me know, I'm curious.
There is a trick I use that you may be able to use for a subscription list. Using Firefox, download the list like normal and save it somewhere temporary. Now in firefox, in the download manager, right click on the downloaded file and click copy download location or url. This is the true URL, try to paste that into the package and see if that works.
-
If I add several list, can I temporarily disable any of the list if I need to just like peerguardian?
-
If I add several list, can I temporarily disable any of the list if I need to just like peerguardian?
It's all or none. You can uncheck the "Enable IP-Blocklist" check box and click save to disable.
-
??? well I've just installed latest build of 1.2.3 on a Gigabyte ATOM 510 board ga-510U if I remember .. 2 gig of ram and an old maxstor 320 gig single partition Sata 150 harddrive. So far its been great but I'm also in the process of trimming down the WHS and saw ip blocklist. right over with the intros..I've just installed via package manager etc copied the link for peer 1 traffic given on the blocklist manager page and received after a few mins….
Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 35 bytes) in /etc/inc/util.inc on line 380
no idea as to what this is referring to ?any help
regards
Piers -
??? well I've just installed latest build of 1.2.3 on a Gigabyte ATOM 510 board ga-510U if I remember .. 2 gig of ram and an old maxstor 320 gig single partition Sata 150 harddrive. So far its been great but I'm also in the process of trimming down the WHS and saw ip blocklist. right over with the intros..I've just installed via package manager etc copied the link for peer 1 traffic given on the blocklist manager page and received after a few mins….
Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 35 bytes) in /etc/inc/util.inc on line 380
no idea as to what this is referring to ?any help
regards
PiersThat's been talked about several times on this topic. The webserver processes the ipblocklist script via php. It will run out of memory because of the way the webserver is configured. You can edit how much memory is dedicated for the webserver, however the script still runs without changing anything.
Just wait for the browser busy or loading animation (even during the out of mem error it's still running when the loading animation is present) to complete. Then reload the page (But do not 'resend') -
tb yes thanks for the quick reply, my bad i do normally check through these posts b4, bloody typical that one of the first times I dont there it is staring at me.. though reloading under ff after waiting about 5 mins still only seems to load a small proportion of the ips that are loaded under peerblock…I shall test some more...and I'll now go and beat myself with a neatly trimmed willow branch....scuttles away :-[
-
tb yes thanks for the quick reply, my bad i do normally check through these posts b4, bloody typical that one of the first times I dont there it is staring at me.. though reloading under ff after waiting about 5 mins still only seems to load a small proportion of the ips that are loaded under peerblock…I shall test some more...and I'll now go and beat myself with a neatly trimmed willow branch....scuttles away :-[
[/quote]What list are you using, the lvl1 list?
-
yup lvl 1 tried all the other stuff for mem increase with no success as well. as an aside ive just re-installed pf sense due to hdd completely dying on me. after installing iblocklist and the lvl 1 it would seem that it is not loading all the ip ranges and I have almost half the number compared to peerblock thats running on windows.I've left the list continuing until the icon finished is animation in the tab then go back to the home page and back to iblocklist to check whats running etc.I dont have a clue as to whythere are less ip's , any thoughts.
-
yup lvl 1 tried all the other stuff for mem increase with no success as well. as an aside ive just re-installed pf sense due to hdd completely dying on me. after installing iblocklist and the lvl 1 it would seem that it is not loading all the ip ranges and I have almost half the number compared to peerblock thats running on windows.I've left the list continuing until the icon finished is animation in the tab then go back to the home page and back to iblocklist to check whats running etc.I dont have a clue as to whythere are less ip's , any thoughts.
Is the number of IPs, just for the lvl1 list, 223972 or 241992? I see what's happening here.
Your Lvl1 List is in fact working perfect and blocking all the IPs. The way the package gets that number is by counting how many lines are in the rule that is created which not only represents IPs but also Networks! I will update the package to reflect the correct verbiage. -
unfortunately the following is happening on hte new build of pfsense
Current List(s): loading
http://iblocklist.whitacrecomputers.com/files/bt_level3.gzETC***
Warning! - Apply after firewall change or state reset. Use at your own risk.
error messageCurrent Status = NOT running
/tmp/rules.debug:55: syntax error
You are blocking 0 IPsthe lvl 1 list never got me anywhere…let me know what other information you'd like and I'll post here...
Piers -
I've just re-installed all the packages that are on the box….. re-install seemed to go ok, however this did nothing for the finctioning of Iblocklist :(( ??? :'(
"Executing custom_php_resync_config_command()...done.
Writing configuration... done.
Starting service.
All packages reinstalled." -
ok, removed HAVP through installed packages dialogue….
then the error moved to line 55... so edited this by removing the following references to HAVP....
havp rdr
havp proxy ifaces redirect
rdr on proto tcp from any to () port 8080 -> lo0 port 8080
Iblocklist seems to have loaded the level 3 Ip's ok and is now running....
I'll post back if as /when I get level 1 loaded and running...
PS thanks for the change to reported ip's etc... Its realy important to me and I guess others that the reported lists are actually what is running.. I've come to trust peerblock as friedns have been handed letters and they only occasionally use bittorrent me I'm a BT whore... and I'l like to move that functionality off the server to the firewall :DPiers
-
Level 1 loaded ok, this time showing 241324 blocked
phew..
Piers -
It seems like ipblocklist may have some incomparability with HAVP due to the way ipblocklist inject's it's rules into the firewall config.
I will do some digging around. Glad you got it working.
-
Because I'm just new to pfSense (new to Linux and BSD) my box is in the process of
install pfSense
update pfSense
install packages
uninstall packages
reinstall pfSenseI think it's good for me because while I'm learning how it works little by little I have the feeling that I already memorized the process of installing/reinstalling :)
My concern is for several installation now I can't make ip-blocklist to work. Added list is not showing, though if I will add the same list I can see it is already on the list. The status also showed not running though enabled is checked. My installation/reinstallation magic is not working :)
How can I check if it is already working or not. Looks not for me because I added Onion Router and Tor list from I-Blocklist and I can still connect to Tor network.
-
Because I'm just new to pfSense (new to Linux and BSD) my box is in the process of
install pfSense
update pfSense
install packages
uninstall packages
reinstall pfSenseI think it's good for me because while I'm learning how it works little by little I have the feeling that I already memorized the process of installing/reinstalling :)
My concern is for several installation now I can't make ip-blocklist to work. Added list is not showing, though if I will add the same list I can see it is already on the list. The status also showed not running though enabled is checked. My installation/reinstallation magic is not working :)
How can I check if it is already working or not. Looks not for me because I added Onion Router and Tor list from I-Blocklist and I can still connect to Tor network.
What browser are you using?
-
google chrome 5.0.375.126
I just check with firefox portable 4.0b5pre, the list is there but the status is also "Not Running". Clicking Save/Update makes it run but it's not running again when I restart pfSense. Is it normal?
The list display is also fine with IE.
-
google chrome 5.0.375.126
I just check with firefox portable 4.0b5pre, the list is there but the status is also "Not Running". Clicking Save/Update makes it run but it's not running again when I restart pfSense. Is it normal?
The list display is also fine with IE.
I think you are missing something. 1. Paste your list link into the form and press '+'. 2. Check 'Enable IP-Blocklist. 3. Click Save/Update.
IE doesn't work with this package. Use FF.
-
Yesterday I noticed that Country Block also interferes with HAVP… I was sad to have to uninstall it...
-
I just updated to the latest snapshot build, using ff ip-blocklist installed fine and i added
http://iblocklist.com/list.php?list=bt_level1
http://iblocklist.com/list.php?list=bt_proxy
http://iblocklist.com/list.php?list=torTried to connect to tor and still works fine. The status is running.
Also, is disabling a certain list (like a checkbox) and not enable all or nothing on the plan for the future releases?
-
As a follow-up, is this normal?
_Current Status = Running
You are blocking 0 IPs_
Same, using this list:
http://iblocklist.com/list.php?list=bt_level1
http://iblocklist.com/list.php?list=bt_proxy
http://iblocklist.com/list.php?list=tor -
As a follow-up, is this normal?
_Current Status = Running
You are blocking 0 IPs_
Same, using this list:
http://iblocklist.com/list.php?list=bt_level1
http://iblocklist.com/list.php?list=bt_proxy
http://iblocklist.com/list.php?list=torPlease look back on previous posts, this has been discussed twice now. Please read the FAQ as well.
Also, I am still working on HAVP compatibility for those of you who want it. It sucks right now that one or the other has to be disabled so if there is anyone who knows php, you can help. -
I am really happy to see this package! I am going to give it a shot and if all goes well I will roll it out to all my pfSense boxes.
Many thanks to the author! :)
-
I am really happy to see this package! I am going to give it a shot and if all goes well I will roll it out to all my pfSense boxes.
Many thanks to the author! :)
Thank you!
-
So far I am pretty impressed and happy. :)
I don't mean to sound picky, but is there a way to whitelist? Or will there be in the future?
-
So far I am pretty impressed and happy. :)
I don't mean to sound picky, but is there a way to whitelist? Or will there be in the future?
That is coming in the next couple updates. I haven't had time to even sit down and look at the package lately due to other priorities.
As soon as I have a good amount of time to dedicate to the project I will update the package. -
Hello, I'm french, so sorry for my bad english ;)
I use Pfsense V2 and Ip-Blocklist.
I try to put level1 and level2 list in ip-blocklist
When I Save/Upload I have this message :
Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 81 bytes) in /etc/inc/util.inc on line 780
As said in previous message i try these thing :
-
Add memory_limit = 128M in /usr/local/lib/php.ini and /usr/local/etc/php.ini -> It disapear after reboot
-
Add ini_set("memory_limit","128M"); in /etc/inc/config.inc -> Maybe it work… Or not... It doesn't shown in /usr/local/lib/php.ini or /usr/local/etc/php.ini
-
I think 128M is not enough so I try to put 256M -> Exactly the same
_From I-Blocklist, lvl1 is about 814983437 IPs and lvl2 is about 330844784 IPs. After the error message, I have only 326376 IPs Blocked and the Status is Running.
An other thing is strange, when I "Purge All" The 2 lists stay in the "Current List(s)"
When 1 Add just lvl1 list, it's ok. The "Current List(s)" show me 1 list..And the last strange thing (but maybe it's normal), when I go to Status: Package logs, it say : "No packages with logging facilities are currently installed." (And the "Enable Logging" is check and saved in Ip-Blocklist of course)
I Tryed to uninstall and reinstall the package several time. Nothing work.
I Have these package installed :
-
Cron
-
NUT
-
Snort
-
IP-Blocklist of course
Can you help me please ?
Add : I use Firefox ;) and the list are these in the exemple : http://iblocklist.whitacrecomputers.com/files/bt_level1.gz_
-
-
Hello, I'm french, so sorry for my bad english ;)
I use Pfsense V2 and Ip-Blocklist.
I try to put level1 and level2 list in ip-blocklist
When I Save/Upload I have this message :
Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 81 bytes) in /etc/inc/util.inc on line 780
As said in previous message i try these thing :
-
Add memory_limit = 128M in /usr/local/lib/php.ini and /usr/local/etc/php.ini -> It disapear after reboot
-
Add ini_set("memory_limit","128M"); in /etc/inc/config.inc -> Maybe it work… Or not... It doesn't shown in /usr/local/lib/php.ini or /usr/local/etc/php.ini
-
I think 128M is not enough so I try to put 256M -> Exactly the same
_From I-Blocklist, lvl1 is about 814983437 IPs and lvl2 is about 330844784 IPs. After the error message, I have only 326376 IPs Blocked and the Status is Running.
An other thing is strange, when I "Purge All" The 2 lists stay in the "Current List(s)"
When 1 Add just lvl1 list, it's ok. The "Current List(s)" show me 1 list..And the last strange thing (but maybe it's normal), when I go to Status: Package logs, it say : "No packages with logging facilities are currently installed." (And the "Enable Logging" is check and saved in Ip-Blocklist of course)
I Tryed to uninstall and reinstall the package several time. Nothing work.
I Have these package installed :
-
Cron
-
NUT
-
Snort
-
IP-Blocklist of course
Can you help me please ?
Add : I use Firefox ;) and the list are these in the exemple : http://iblocklist.whitacrecomputers.com/files/bt_level1.gz
Adding large lists will result in the php memory error. Just wait for the 'spinning animation' in FF stop before you continue.
When it says you are blocking X amount of IPs it's supposed to say X amount networks/IPs. Then number is correct just the wrong wording.
Purge all basically deletes your settings. You may try refreshing to see if your settings have been deleted. If it's not working on BETA 2 then you may have to delete one by one.
Logging doesn't go to the package logging section, all logging goes to the firewall log.Updates will be coming soon for those who are waiting. Keep on the look out for email alerts, bug fixes, and feature additions._
-