Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IP-Blocklist

    Scheduled Pinned Locked Moved pfSense Packages
    496 Posts 86 Posters 501.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      tommyboy180
      last edited by

      @plehmann:

      tb  yes thanks for the quick reply, my bad i do normally check through these posts b4,  bloody typical that one of the first times I dont  there it is staring at me.. though reloading under ff  after waiting about 5 mins  still only seems to load a small proportion of the ips that are loaded under peerblock…I shall test some more...and I'll now go and beat myself with a neatly trimmed willow branch....scuttles away :-[
      [/quote]

      What list are you using, the lvl1 list?

      -Tom Schaefer
      SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

      Please support pfBlocker | File Browser | Strikeback

      1 Reply Last reply Reply Quote 0
      • P
        plehmann
        last edited by

        yup lvl 1 tried all the other stuff for  mem increase with no success as well. as an aside ive just re-installed pf sense due to hdd completely dying on me. after installing iblocklist  and the lvl 1 it would seem that it is not loading all the ip ranges and I have almost half the number compared to peerblock thats running on windows.I've left the list continuing until the icon finished is animation in the tab then go back to the home page and back to iblocklist to check whats running etc.I dont have a clue as to whythere are less ip's , any thoughts.

        1 Reply Last reply Reply Quote 0
        • T
          tommyboy180
          last edited by

          @plehmann:

          yup lvl 1 tried all the other stuff for  mem increase with no success as well. as an aside ive just re-installed pf sense due to hdd completely dying on me. after installing iblocklist  and the lvl 1 it would seem that it is not loading all the ip ranges and I have almost half the number compared to peerblock thats running on windows.I've left the list continuing until the icon finished is animation in the tab then go back to the home page and back to iblocklist to check whats running etc.I dont have a clue as to whythere are less ip's , any thoughts.

          Is the number of IPs, just for the lvl1 list, 223972 or 241992? I see what's happening here.
          Your Lvl1 List is in fact working perfect and blocking all the IPs. The way the package gets that number is by counting how many lines are in the rule that is created which not only represents IPs but also Networks! I will update the package to reflect the correct verbiage.

          -Tom Schaefer
          SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

          Please support pfBlocker | File Browser | Strikeback

          1 Reply Last reply Reply Quote 0
          • P
            plehmann
            last edited by

            unfortunately the following is happening on hte new  build of pfsense

            Current List(s): loading
            http://iblocklist.whitacrecomputers.com/files/bt_level3.gz

            ETC***

            Warning! - Apply after firewall change or state reset. Use at your own risk.
            error message

            Current Status = NOT running
            /tmp/rules.debug:55: syntax error
            You are blocking 0 IPs

            the lvl 1 list  never got me anywhere…let me know what other information you'd like and I'll post here...
            Piers

            1 Reply Last reply Reply Quote 0
            • P
              plehmann
              last edited by

              I've just re-installed all the packages that are on the box…..  re-install seemed to go ok, however this did nothing for the finctioning of Iblocklist :((  ??? :'(

              "Executing custom_php_resync_config_command()...done.
              Writing configuration... done.
              Starting service.
              All packages reinstalled."

              1 Reply Last reply Reply Quote 0
              • P
                plehmann
                last edited by

                ok, removed HAVP through installed packages  dialogue….

                then the error moved to  line 55... so edited this  by removing the following references to  HAVP....

                havp rdr

                havp proxy ifaces redirect

                rdr on proto tcp from any to () port 8080 -> lo0 port 8080

                Iblocklist seems to have loaded the level 3 Ip's  ok and is now running....

                I'll post back  if as /when I get level 1  loaded and running...
                PS thanks  for the change to reported ip's etc...  Its realy important to me and I guess others that the reported lists are actually what is running.. I've come to trust peerblock as friedns have been handed letters and they only occasionally  use bittorrent  me I'm a BT whore... and I'l like to move that functionality off the server to the firewall :D

                Piers

                1 Reply Last reply Reply Quote 0
                • P
                  plehmann
                  last edited by

                  Level 1 loaded ok, this time showing 241324  blocked

                  phew..
                  Piers

                  1 Reply Last reply Reply Quote 0
                  • T
                    tommyboy180
                    last edited by

                    It seems like ipblocklist may have some incomparability with HAVP due to the way ipblocklist inject's it's rules into the firewall config.

                    I will do some digging around. Glad you got it working.

                    -Tom Schaefer
                    SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                    Please support pfBlocker | File Browser | Strikeback

                    1 Reply Last reply Reply Quote 0
                    • X
                      Xthink
                      last edited by

                      Because I'm just new to pfSense (new to Linux and BSD) my box is in the process of

                      install pfSense
                      update pfSense
                      install packages
                      uninstall packages
                      reinstall pfSense

                      I think it's good for me because while I'm learning how it works little by little I have the feeling that I already memorized the process of installing/reinstalling  :)

                      My concern is for several installation now I can't make ip-blocklist to work. Added list is not showing, though if I will add the same list I can see it is already on the list. The status also showed not running though enabled is checked. My installation/reinstallation magic is not working  :)

                      How can I check if it is already working or not. Looks not for me because I added Onion Router and Tor list from I-Blocklist and I can still connect to Tor network.

                      1 Reply Last reply Reply Quote 0
                      • T
                        tommyboy180
                        last edited by

                        @Xthink:

                        Because I'm just new to pfSense (new to Linux and BSD) my box is in the process of

                        install pfSense
                        update pfSense
                        install packages
                        uninstall packages
                        reinstall pfSense

                        I think it's good for me because while I'm learning how it works little by little I have the feeling that I already memorized the process of installing/reinstalling   :)

                        My concern is for several installation now I can't make ip-blocklist to work. Added list is not showing, though if I will add the same list I can see it is already on the list. The status also showed not running though enabled is checked. My installation/reinstallation magic is not working   :)

                        How can I check if it is already working or not. Looks not for me because I added Onion Router and Tor list from I-Blocklist and I can still connect to Tor network.

                        What browser are you using?

                        -Tom Schaefer
                        SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                        Please support pfBlocker | File Browser | Strikeback

                        1 Reply Last reply Reply Quote 0
                        • X
                          Xthink
                          last edited by

                          google chrome 5.0.375.126

                          I just check with firefox portable 4.0b5pre, the list is there but the status is also "Not Running". Clicking Save/Update makes it run but it's not running again when I restart pfSense. Is it normal?

                          The list display is also fine with IE.

                          1 Reply Last reply Reply Quote 0
                          • T
                            tommyboy180
                            last edited by

                            @Xthink:

                            google chrome 5.0.375.126

                            I just check with firefox portable 4.0b5pre, the list is there but the status is also "Not Running". Clicking Save/Update makes it run but it's not running again when I restart pfSense. Is it normal?

                            The list display is also fine with IE.

                            I think you are missing something. 1. Paste your list link into the form and press '+'. 2. Check 'Enable IP-Blocklist. 3. Click Save/Update.

                            IE doesn't work with this package. Use FF.

                            -Tom Schaefer
                            SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                            Please support pfBlocker | File Browser | Strikeback

                            1 Reply Last reply Reply Quote 0
                            • P
                              Pistolero
                              last edited by

                              Yesterday I noticed that Country Block also interferes with HAVP… I was sad to have to uninstall it...

                              1 Reply Last reply Reply Quote 0
                              • X
                                Xthink
                                last edited by

                                I just updated to the latest snapshot build, using ff ip-blocklist installed fine and i added

                                http://iblocklist.com/list.php?list=bt_level1
                                http://iblocklist.com/list.php?list=bt_proxy
                                http://iblocklist.com/list.php?list=tor

                                Tried to connect to tor and still works fine. The status is running.

                                Also, is disabling a certain list (like a checkbox) and not enable all or nothing on the plan for the future releases?

                                1 Reply Last reply Reply Quote 0
                                • X
                                  Xthink
                                  last edited by

                                  As a follow-up, is this normal?

                                  _Current Status = Running

                                  You are blocking 0 IPs_

                                  Same, using this list:
                                  http://iblocklist.com/list.php?list=bt_level1
                                  http://iblocklist.com/list.php?list=bt_proxy
                                  http://iblocklist.com/list.php?list=tor

                                  1 Reply Last reply Reply Quote 0
                                  • T
                                    tommyboy180
                                    last edited by

                                    @Xthink:

                                    As a follow-up, is this normal?

                                    _Current Status = Running

                                    You are blocking 0 IPs_

                                    Same, using this list:
                                    http://iblocklist.com/list.php?list=bt_level1
                                    http://iblocklist.com/list.php?list=bt_proxy
                                    http://iblocklist.com/list.php?list=tor

                                    Please look back on previous posts, this has been discussed twice now. Please read the FAQ as well.
                                    Also, I am still working on HAVP compatibility for those of you who want it. It sucks right now that one or the other has to be disabled so if there is anyone who knows php, you can help.

                                    -Tom Schaefer
                                    SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                    Please support pfBlocker | File Browser | Strikeback

                                    1 Reply Last reply Reply Quote 0
                                    • D
                                      DWAyotte
                                      last edited by

                                      I am really happy to see this package! I am going to give it a shot and if all goes well I will roll it out to all my pfSense boxes.

                                      Many thanks to the author! :)

                                      1 Reply Last reply Reply Quote 0
                                      • T
                                        tommyboy180
                                        last edited by

                                        @DWAyotte:

                                        I am really happy to see this package! I am going to give it a shot and if all goes well I will roll it out to all my pfSense boxes.

                                        Many thanks to the author! :)

                                        Thank you!

                                        -Tom Schaefer
                                        SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                        Please support pfBlocker | File Browser | Strikeback

                                        1 Reply Last reply Reply Quote 0
                                        • D
                                          DWAyotte
                                          last edited by

                                          So far I am pretty impressed and happy. :)

                                          I don't mean to sound picky, but is there a way to whitelist? Or will there be in the future?

                                          1 Reply Last reply Reply Quote 0
                                          • T
                                            tommyboy180
                                            last edited by

                                            @DWAyotte:

                                            So far I am pretty impressed and happy. :)

                                            I don't mean to sound picky, but is there a way to whitelist? Or will there be in the future?

                                            That is coming in the next couple updates. I haven't had time to even sit down and look at the package lately due to other priorities.
                                            As soon as I have a good amount of time to dedicate to the project I will update the package.

                                            -Tom Schaefer
                                            SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                            Please support pfBlocker | File Browser | Strikeback

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.