Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Country Block

    Scheduled Pinned Locked Moved pfSense Packages
    691 Posts 79 Posters 691.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      kilthro
      last edited by

      wow thats awesome!!!

      Gonna give it a try. Thanks for the updates!!!!

      1 Reply Last reply Reply Quote 0
      • D
        DigitalJer
        last edited by

        The hits just keep on comin!

        Thanks much TB - strong work indeed!

        –------------------------------------------------
        2.4.3-RELEASE (amd64)
        built on Mon Mar 26 18:02:04 CDT 2018
        FreeBSD 11.1-RELEASE-p7
        VM in ESXi 5.5
        1 x 1000baseTX (WAN)
        1 x 1000baseTX (LAN)

        1 Reply Last reply Reply Quote 0
        • B
          Bai Shen
          last edited by

          @robfantini:

          Which version of CB are you using?

          And PfSense version?

          Newest of both.  1.7 and 1.2.3

          It's still running today from yesterday.  So I'm guessing my problem is that I can't always tell when something will make a firewall change and force me to restart CB.

          Is there any way to have CB be part of the firewall restart?  Surely there has to be some sort of hook for that.

          1 Reply Last reply Reply Quote 0
          • T
            tommyboy180
            last edited by

            @Bai:

            @robfantini:

            Which version of CB are you using?

            And PfSense version?

            Newest of both.  1.7 and 1.2.3

            It's still running today from yesterday.  So I'm guessing my problem is that I can't always tell when something will make a firewall change and force me to restart CB.

            Is there any way to have CB be part of the firewall restart?  Surely there has to be some sort of hook for that.

            It's possible. I have been trying to make countryblock more integrated since the day I started development. I never figured it out. I'm hoping that I will soon or someone will.

            -Tom Schaefer
            SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

            Please support pfBlocker | File Browser | Strikeback

            1 Reply Last reply Reply Quote 0
            • D
              DigitalJer
              last edited by

              Trying out the email config:  entered in the applicable settings, clicked Save, and this error appears:

              Couldn't write values to file!

              Navigating again to the email tab reveals this line:

              Your settings have already been set. Would you like to overwrite your email settings?

              Warning: file_get_contents(email_config.html): failed to open stream: No such file or directory in /usr/local/www/packages/countryblock/email.php on line 172

              Uninstalling / re-installing doesn't seem to help :(

              –------------------------------------------------
              2.4.3-RELEASE (amd64)
              built on Mon Mar 26 18:02:04 CDT 2018
              FreeBSD 11.1-RELEASE-p7
              VM in ESXi 5.5
              1 x 1000baseTX (WAN)
              1 x 1000baseTX (LAN)

              1 Reply Last reply Reply Quote 0
              • T
                tommyboy180
                last edited by

                @DigitalJer:

                Trying out the email config:  entered in the applicable settings, clicked Save, and this error appears:

                Couldn't write values to file!

                Navigating again to the email tab reveals this line:

                Your settings have already been set. Would you like to overwrite your email settings?

                Warning: file_get_contents(email_config.html): failed to open stream: No such file or directory in /usr/local/www/packages/countryblock/email.php on line 172

                Uninstalling / re-installing doesn't seem to help :(

                Are you leaving a field blank? If so which field?
                EDIT: Which browser are you using?

                -Tom Schaefer
                SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                Please support pfBlocker | File Browser | Strikeback

                1 Reply Last reply Reply Quote 0
                • D
                  DigitalJer
                  last edited by

                  @tommyboy180:

                  Are you leaving a field blank? If so which field?
                  EDIT: Which browser are you using?

                  Yep, leaving Username and Password blank, as my ISP doesn't require that info.  I can just use Gmail, if that will satisfy CB ?

                  Using Chrome.

                  EDIT:  works great with Gmail (all fields filled in).

                  Thanks tho :)

                  –------------------------------------------------
                  2.4.3-RELEASE (amd64)
                  built on Mon Mar 26 18:02:04 CDT 2018
                  FreeBSD 11.1-RELEASE-p7
                  VM in ESXi 5.5
                  1 x 1000baseTX (WAN)
                  1 x 1000baseTX (LAN)

                  1 Reply Last reply Reply Quote 0
                  • X
                    XIII
                    last edited by

                    All fields must be filled in for the email function to work.
                    Dont forget that for it to be able to restart CB you must have started it at least once.

                    -Chris Stutzman
                    Sys0:2.0.1: AMD Sempron 140 @2.7 1024M RAM 100GHD
                    Sys1:2.0.1: Intel P4 @2.66 1024M RAM 40GHD
                    freedns.afraid.org - Free DNS dynamic DNS subdomain and domain hosting.
                    Check out the pfSense Wiki

                    1 Reply Last reply Reply Quote 0
                    • R
                      robfantini
                      last edited by

                      @DigitalJer:

                      Could you post your gmail settings?

                      1 Reply Last reply Reply Quote 0
                      • X
                        XIII
                        last edited by

                        @DigitalJer  set SMTP Auth = No and see if that works

                        @robfantini
                        You did the quote wrong.

                        But heres the info you requested:
                        SMTP Auth = Yes
                        SMTP Security = Yes
                        Host = smtp.gmail.com  (this is for gmail and GApps users)
                        Port = 465
                        User name = your full username (test@gmail.com)
                        Password = your password
                        Use HTML Formatting = Yes
                        From Email address = your full username (test@gmail.com)
                        To Email address = email you are sending notifications to
                        Subject = whatever you want

                        -Chris Stutzman
                        Sys0:2.0.1: AMD Sempron 140 @2.7 1024M RAM 100GHD
                        Sys1:2.0.1: Intel P4 @2.66 1024M RAM 40GHD
                        freedns.afraid.org - Free DNS dynamic DNS subdomain and domain hosting.
                        Check out the pfSense Wiki

                        1 Reply Last reply Reply Quote 0
                        • R
                          robfantini
                          last edited by

                          @XIII:

                          @DigitalJer  set SMTP Auth = No and see if that works

                          @robfantini
                          You did the quote wrong.

                          But heres the info you requested:
                          SMTP Auth = Yes
                          SMTP Security = Yes
                          Host = smtp.gmail.com  (this is for gmail and GApps users)
                          Port = 465
                          User name = your full username (test@gmail.com)
                          Password = your password
                          Use HTML Formatting = Yes
                          From Email address = your full username (test@gmail.com)
                          To Email address = email you are sending notifications to
                          Subject = whatever you want

                          thank you, that worked.  I had been using the wrong port.

                          1 Reply Last reply Reply Quote 0
                          • S
                            Supermule Banned
                            last edited by

                            I get this when trying…

                            Parse error: syntax error, unexpected $end in /usr/local/www/packages/countryblock/email_send.php on line 6

                            1 Reply Last reply Reply Quote 0
                            • R
                              robfantini
                              last edited by

                              @Supermule:

                              I get this when trying…

                              Parse error: syntax error, unexpected $end in /usr/local/www/packages/countryblock/email_send.php on line 6

                              I had that happen until I filled in all fields , pressed save.

                              SMTP auth  could not be set to no.    Originally I wanted to use our local LAN mail server . I could only use my gmail smtp account.

                              1 Reply Last reply Reply Quote 0
                              • X
                                XIII
                                last edited by

                                any smtp account should work.

                                For the smtp auth did you still fill in the username and password when it was set to no?

                                -Chris Stutzman
                                Sys0:2.0.1: AMD Sempron 140 @2.7 1024M RAM 100GHD
                                Sys1:2.0.1: Intel P4 @2.66 1024M RAM 40GHD
                                freedns.afraid.org - Free DNS dynamic DNS subdomain and domain hosting.
                                Check out the pfSense Wiki

                                1 Reply Last reply Reply Quote 0
                                • S
                                  Supermule Banned
                                  last edited by

                                  nope….used mail instead of smtp...

                                  1 Reply Last reply Reply Quote 0
                                  • R
                                    robfantini
                                    last edited by

                                    @XIII:

                                    any smtp account should work.

                                    For the smtp auth did you still fill in the username and password when it was set to no?

                                    I did set the account username and password .. I ended up with an ssl error.

                                    Just checked the log on our postfix server.

                                    Oct  6 08:42:15 mail postfix/smtpd[10912]: connect from fbc2.fantinibakery.com[10.100.100.2]
                                    Oct  6 08:42:15 mail postfix/smtpd[10912]: NOQUEUE: reject: RCPT from fbc2.fantinibakery.com[10.100.100.2]: 504 5.5.2 <root>: Sender address rejected: need fully-qualified address; from= <root>to= <rob>proto=ESMTP helo= <localhost.localdomain>Oct  6 08:42:15 mail postfix/smtpd[10912]: lost connection after RSET from fbc2.fantinibakery.com[10.100.100.2]
                                    Oct  6 08:42:15 mail postfix/smtpd[10912]: disconnect from fbc2.fantinibakery.com[10.100.100.2]
                                    Oct  6 08:42:34 mail postfix/smtpd[10870]: connect from fbc2.fantinibakery.com[10.100.100.2]
                                    Oct  6 08:42:34 mail postfix/smtpd[10870]: lost connection after UNKNOWN from fbc2.fantinibakery.com[10.100.100.2]
                                    Oct  6 08:42:34 mail postfix/smtpd[10870]: disconnect from fbc2.fantinibakery.com[10.100.100.2]</localhost.localdomain></rob></root></root> 
                                    

                                    Looks like the cb pgm works… must be due to not having the full mail address..

                                    1 Reply Last reply Reply Quote 0
                                    • X
                                      XIII
                                      last edited by

                                      looks like the username was rejected as the mail server requires usernames to be like test@gmail.com instead of test.

                                      -Chris Stutzman
                                      Sys0:2.0.1: AMD Sempron 140 @2.7 1024M RAM 100GHD
                                      Sys1:2.0.1: Intel P4 @2.66 1024M RAM 40GHD
                                      freedns.afraid.org - Free DNS dynamic DNS subdomain and domain hosting.
                                      Check out the pfSense Wiki

                                      1 Reply Last reply Reply Quote 0
                                      • R
                                        robfantini
                                        last edited by

                                        @XIII:

                                        looks like the username was rejected as the mail server requires usernames to be like test@gmail.com instead of test.

                                        I tried to switch to non ssl and our local server.

                                        at the top of the email settings is:

                                        "Your settings have already been set. Would you like to overwrite your email settings?"

                                        I click save below and 
                                        1- the ssl setting does not change
                                        2- the messages stays at the top of the screen.

                                        I'm using firefox

                                        i just checked /usr/local/www/packages/countryblock/email_send.php

                                        include("class.phpmailer.php");
                                        $mail             = new PHPMailer();
                                        
                                        $mail->IsSMTP();
                                        $mail->SMTPAuth   = false;
                                        $mail->SMTPSecure = "ssl";
                                        $mail->Host       = "10.100.100.14";
                                        $mail->Port       = 25;
                                        $mail->Username   = "rob";
                                        $mail->Password   = "****";
                                        $mail->AddReplyTo("root@fbc2.fantinibakery.com","pfsense countryblock");
                                        $mail->From       = "root@fbc2.fantinibakery.com";
                                        $mail->Subject    = "Countryblock - pfsense";
                                        $mail->AltBody    = "To view the message, please use an HTML compatible email viewer!";
                                        $mail->WordWrap   = 50;
                                        $body               = "Countryblock encountered an event. A system log entry was made with details of event";
                                        $body              .= "
                                        
                                        " . date('l jS \of F Y h:i:s A') . "
                                        
                                        Current Status = ";
                                        ob_start();
                                        $results = exec("pfctl -s rules | grep -c countryblock");
                                        ob_end_clean();
                                        if ($results > '0')
                                        $body              .= "Running";
                                        else
                                        $body              .= "Restarting";
                                        
                                        

                                        and ssl is set to false.

                                        However and I just checked again  -  SMTP Auth  is 'yes' .

                                        so i  from cli:

                                        # php /usr/local/www/packages/countryblock/email_send.php
                                        Content-type: text/html
                                        
                                        Warning: fsockopen(): SSL operation failed with code 1\. OpenSSL Error messages:
                                        error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol in /usr/local/www/packages/countryblock/class.smtp.php on line 122
                                        
                                        Warning: fsockopen(): php_stream_sock_ssl_activate_with_method: SSL handshake/connection failed in /usr/local/www/packages/countryblock/class.smtp.php on line 122
                                        
                                        Warning: fsockopen(): failed to activate SSL mode 1 in /usr/local/www/packages/countryblock/class.smtp.php on line 122
                                        Mailer Error: SMTP Error: Could not connect to SMTP host.# 
                                        
                                        

                                        and the mail server log:

                                        Oct  6 19:01:25 mail postfix/smtpd[18233]: connect from fbc2.fantinibakery.com[10.100.100.2]
                                        Oct  6 19:01:25 mail postfix/smtpd[18233]: lost connection after UNKNOWN from fbc2.fantinibakery.com[10.100.100.2]
                                        Oct  6 19:01:25 mail postfix/smtpd[18233]: disconnect from fbc2.fantinibakery.com[10.100.100.2]
                                        
                                        
                                        1 Reply Last reply Reply Quote 0
                                        • R
                                          robfantini
                                          last edited by

                                          I am also unable to change " HTML formatting " to  no .

                                          these are small issues and I am not complaining!  if there is anything you'd like me to test then email a file or let me know what to do.

                                          1 Reply Last reply Reply Quote 0
                                          • X
                                            XIII
                                            last edited by

                                            the message about settings already set will always be there.

                                            I hope outside users connecting to your mail server use SSL otherwise all their passwords are sent in the clear

                                            right now:
                                            subject line does not get set
                                            it only works with ssl connections because it is set to implement OpenSSL

                                            -Chris Stutzman
                                            Sys0:2.0.1: AMD Sempron 140 @2.7 1024M RAM 100GHD
                                            Sys1:2.0.1: Intel P4 @2.66 1024M RAM 40GHD
                                            freedns.afraid.org - Free DNS dynamic DNS subdomain and domain hosting.
                                            Check out the pfSense Wiki

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.