Country Block

mgc6288

Version 1.6 is now available!

Changes:

All interfaces are selected/applied by default (no action required by users)

Modified Usage description to be more verbose

To upgrade uninstall countryblock and re-install.

thanks for the patience. Duh, I should have realized maybe uninstalling should have been done first. Works like a charm now.

darklogic

Just an FYI. Since version 1.5 I have been having trouble with keeping Country Block running. I am running cron and have not made any changes to firewall rules. I uninstall the package numerous times and restarted the system. I can get CountryBlock to start ok, but it will only run for a few hours and then shut down. I have also uninstalled and reinstalled cron.

Is anybody else getting this? I noticed started happeing when I install 1.5 and now 1.6.

Thanks,

Supermule

Not reporting anything of that kind :)

tommyboy180

@darklogic:

Just an FYI. Since version 1.5 I have been having trouble with keeping Country Block running. I am running cron and have not made any changes to firewall rules. I uninstall the package numerous times and restarted the system. I can get CountryBlock to start ok, but it will only run for a few hours and then shut down. I have also uninstalled and reinstalled cron.

Is anybody else getting this? I noticed started happeing when I install 1.5 and now 1.6.

Thanks,

The only real difference between 1.5 and 1.6 is a new file is included. The file is interfaces.txt and it contains "any" by default.
The difference between 1.4 and 1.5 is the interfaces can be specified.
Nothing has changed with how the package is run or how it starts.

Are you getting any errors?

darklogic

no errors, that is why it is odd. It will start just fine and then shut down for no reason. I will try to uninstall and reboot and reinstall again and see if that helps. I have tried this a few times now. I will try again,

Thanks,

mgc6288

@darklogic:

Just an FYI. Since version 1.5 I have been having trouble with keeping Country Block running. I am running cron and have not made any changes to firewall rules. I uninstall the package numerous times and restarted the system. I can get CountryBlock to start ok, but it will only run for a few hours and then shut down. I have also uninstalled and reinstalled cron.

Is anybody else getting this? I noticed started happeing when I install 1.5 and now 1.6.

Thanks,

I've been having the same issue. I removed countryblock from cron and now it runs…I just check every once in a while. What I did is after I installed the Cron package, I created an auto start like this:

minute: 0
hour: *
mday: *
month: *
wday: *
who: root
command: /usr/local/etc/rc.d/countryblock.sh

Now 1.6 (can't confirm 1.5 as the update was too quick) will say "NOT running" after a while...

chpalmer

@mgc6288:

I've been having the same issue. I removed countryblock from cron and now it runs…I just check every once in a while. What I did is after I installed the Cron package, I created an auto start like this:

minute: 0
hour: *
mday: *
month: *
wday: *
who: root
command: /usr/local/etc/rc.d/countryblock.sh

Now 1.6 (can't confirm 1.5 as the update was too quick) will say "NOT running" after a while...

Ditto and 1.5 did this to me also… ;)

tommyboy180

I'm glad you figured it out.
I don't run a cron job but my countryblock (v1.6) has been running for me two days in a row now without issues.

robfantini

We are using Pfsense 1.2.3-RELEASE and CountryBlock 1.6

I can not keep CountryBlock running.

I have cron set to run the script every 5 min.

We also use squid and squidGuard. Are those packages ok to run with CountryBlock?

PS: Thanks for this package . I can see that it will

tommyboy180

@robfantini:

We are using Pfsense 1.2.3-RELEASE and CountryBlock 1.6

I can not keep CountryBlock running.

I have cron set to run the script every 5 min.

We also use squid and squidGuard. Are those packages ok to run with CountryBlock?

PS: Thanks for this package . I can see that it will

Can you PM me your config. I will be home early tonight and will be able to take a look at it.

kilthro

I just updated to your latest version and I am having the same issue. It will stop running after a bit and then I have to manually start it. I added the cron job like a couple a posts above ( was running that cron setting before with no issue) and it still will not stay running.

I dont know if Snort is updating the FW rules/states and then cron isnt properly re-enabling country block after the change. Over the past week it has been working just fine. Just all this after the update version 1.6. I was running 1.4 prior.

I am on the latest 2.0 beta build that has been posted.

Is there anything you need from me that may assist with isolating the issue?

tommyboy180

@kilthro:

I just updated to your latest version and I am having the same issue. It will stop running after a bit and then I have to manually start it. I added the cron job like a couple a posts above ( was running that cron setting before with no issue) and it still will not stay running.

I dont know if Snort is updating the FW rules/states and then cron isnt properly re-enabling country block after the change. Over the past week it has been working just fine. Just all this after the update version 1.6. I was running 1.4 prior.

I am on the latest 2.0 beta build that has been posted.

Is there anything you need from me that may assist with isolating the issue?

List of packages installed please. Also do you have traffic shaping running?
I need to figure this out. I'm home now so I can work on this for the next couple of hours.

chpalmer

Just came home and Country Block is not running…

Have this in my logs.

Last 50 system log entries
Oct 1 10:14:12 syslogd: kernel boot file is /boot/kernel/kernel
Oct 1 17:28:47 root: rc.update_bogons.sh is beginning the update cycle.
Oct 1 17:28:49 root: Bogons file downloaded: no changes.
Oct 1 18:10:00 check_reload_status: check_reload_status is starting

1.2.3R with only Country Block and Cron installed as packages.

I use dynamic dns.

I have a vip for a static IP I have.

Im on cable.

If I think of anything else Ill add it later...

:)

tommyboy180

@chpalmer:

Just came home and Country Block is not running…

Have this in my logs.

Last 50 system log entries
Oct 1 10:14:12 syslogd: kernel boot file is /boot/kernel/kernel
Oct 1 17:28:47 root: rc.update_bogons.sh is beginning the update cycle.
Oct 1 17:28:49 root: Bogons file downloaded: no changes.
Oct 1 18:10:00 check_reload_status: check_reload_status is starting

1.2.3R with only Country Block and Cron installed as packages.

I use dynamic dns.

I have a vip for a static IP I have.

Im on cable.

If I think of anything else Ill add it later...

:)

Edit:
When the Bogons update cron job is run the firewall settings get re-applied and that is why countryblock was stopped. To counter this you can have countryblock run after this.
This may be why everyone is having difficulty with keeping the package running, a cron job is running that affects the firewall thus killing countryblock.

tommyboy180

Version 1.7 is available.

Changes:

Complete UI overhaul
Changed execution process

Hopefully these changes will help those people that are having trouble keeping the package running.

To upgrade Uninstall Countryblock, reboot, and then install the newest version.

1.7.jpg
1.7.jpg_thumb
1.7_black.jpg
1.7_black.jpg_thumb

robfantini

thank you for the update. we are lucky to have you working on this package.

0.1.6 would not stay running.

0.1.7 has been up approx an hour without a problem…

one question - i enabled logging. do I need to setup log rotation ?

Supermule

I have never seen updates come this fast…....;)

tommyboy180

@robfantini:

thank you for the update. we are lucky to have you working on this package.

0.1.6 would not stay running.

0.1.7 has been up approx an hour without a problem…

one question - i enabled logging. do I need to setup log rotation ?

Thank you. I hope it keeps running.
As far as log rotation goes: unless you are blocking a huge amount of networks and need to keep track of a couple days worth then no. Blocking a couple countries may increase your log size significantly depending on your networks, however. It's really Dependant on how many entries are being produced and how much you need to keep track of.

Thank you Supermule :) I got off work early today and I wanted to fix this problem that some people were having with the last update.

kilthro

I dont have traffic shaping running

Packages are
Country Block
Cron
DarkStat
nmap
snort

I will give the updated version a try and see if that resolves it.

Thanks so much for your support and quick updates on this package. :-)

robfantini

After a few hours CB is still running.

Here is one thing to check:

when I click 'Country Block' under 'Firewall' section in Pfsense the 'Enable Country Block' is 'on'

when I add countries, the 'Enable Country Block' is unchecked or 'off' at the top of the screen.
so for now if you add/change countries , reclick the 'Enable Country Block'

CB for us is working a lot better.