Country Block

XIII

any smtp account should work.

For the smtp auth did you still fill in the username and password when it was set to no?

Supermule

nope….used mail instead of smtp...

robfantini

@XIII:

any smtp account should work.

For the smtp auth did you still fill in the username and password when it was set to no?

I did set the account username and password .. I ended up with an ssl error.

Just checked the log on our postfix server.

Oct  6 08:42:15 mail postfix/smtpd[10912]: connect from fbc2.fantinibakery.com[10.100.100.2]
Oct  6 08:42:15 mail postfix/smtpd[10912]: NOQUEUE: reject: RCPT from fbc2.fantinibakery.com[10.100.100.2]: 504 5.5.2 <root>: Sender address rejected: need fully-qualified address; from= <root>to= <rob>proto=ESMTP helo= <localhost.localdomain>Oct  6 08:42:15 mail postfix/smtpd[10912]: lost connection after RSET from fbc2.fantinibakery.com[10.100.100.2]
Oct  6 08:42:15 mail postfix/smtpd[10912]: disconnect from fbc2.fantinibakery.com[10.100.100.2]
Oct  6 08:42:34 mail postfix/smtpd[10870]: connect from fbc2.fantinibakery.com[10.100.100.2]
Oct  6 08:42:34 mail postfix/smtpd[10870]: lost connection after UNKNOWN from fbc2.fantinibakery.com[10.100.100.2]
Oct  6 08:42:34 mail postfix/smtpd[10870]: disconnect from fbc2.fantinibakery.com[10.100.100.2]</localhost.localdomain></rob></root></root>

Looks like the cb pgm works… must be due to not having the full mail address..

XIII

looks like the username was rejected as the mail server requires usernames to be like test@gmail.com instead of test.

robfantini

@XIII:

looks like the username was rejected as the mail server requires usernames to be like test@gmail.com instead of test.

I tried to switch to non ssl and our local server.

at the top of the email settings is:

"Your settings have already been set. Would you like to overwrite your email settings?"

I click save below and
1- the ssl setting does not change
2- the messages stays at the top of the screen.

I'm using firefox

i just checked /usr/local/www/packages/countryblock/email_send.php

include("class.phpmailer.php");
$mail             = new PHPMailer();

$mail->IsSMTP();
$mail->SMTPAuth   = false;
$mail->SMTPSecure = "ssl";
$mail->Host       = "10.100.100.14";
$mail->Port       = 25;
$mail->Username   = "rob";
$mail->Password   = "****";
$mail->AddReplyTo("root@fbc2.fantinibakery.com","pfsense countryblock");
$mail->From       = "root@fbc2.fantinibakery.com";
$mail->Subject    = "Countryblock - pfsense";
$mail->AltBody    = "To view the message, please use an HTML compatible email viewer!";
$mail->WordWrap   = 50;
$body               = "Countryblock encountered an event. A system log entry was made with details of event";
$body              .= "

" . date('l jS \of F Y h:i:s A') . "

Current Status = ";
ob_start();
$results = exec("pfctl -s rules | grep -c countryblock");
ob_end_clean();
if ($results > '0')
$body              .= "Running";
else
$body              .= "Restarting";

and ssl is set to false.

However and I just checked again - SMTP Auth is 'yes' .

so i from cli:

# php /usr/local/www/packages/countryblock/email_send.php
Content-type: text/html

Warning: fsockopen(): SSL operation failed with code 1\. OpenSSL Error messages:
error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol in /usr/local/www/packages/countryblock/class.smtp.php on line 122

Warning: fsockopen(): php_stream_sock_ssl_activate_with_method: SSL handshake/connection failed in /usr/local/www/packages/countryblock/class.smtp.php on line 122

Warning: fsockopen(): failed to activate SSL mode 1 in /usr/local/www/packages/countryblock/class.smtp.php on line 122
Mailer Error: SMTP Error: Could not connect to SMTP host.#

and the mail server log:

Oct  6 19:01:25 mail postfix/smtpd[18233]: connect from fbc2.fantinibakery.com[10.100.100.2]
Oct  6 19:01:25 mail postfix/smtpd[18233]: lost connection after UNKNOWN from fbc2.fantinibakery.com[10.100.100.2]
Oct  6 19:01:25 mail postfix/smtpd[18233]: disconnect from fbc2.fantinibakery.com[10.100.100.2]

robfantini

I am also unable to change " HTML formatting " to no .

these are small issues and I am not complaining! if there is anything you'd like me to test then email a file or let me know what to do.

XIII

the message about settings already set will always be there.

I hope outside users connecting to your mail server use SSL otherwise all their passwords are sent in the clear

right now:
subject line does not get set
it only works with ssl connections because it is set to implement OpenSSL

robfantini

@XIII:

the message about settings already set will always be there.

I hope outside users connecting to your mail server use SSL otherwise all their passwords are sent in the clear

right now:
subject line does not get set
it only works with ssl connections because it is set to implement OpenSSL

we do use ssl for off site imap . and do not accept mail relays .

Anyways maybe I should try to setup internal ssl to make this work.

tommyboy180

The SMTP Auth, SMTP Security, and Use HTML Drop down lists display the default values regardless of your settings. This is a bug, so just be aware that it may be displayed as one thing but it's another. This will be fixed soon now that it's identified.
I will also fix it so the password field will be black and the subject input will reflect on your emails.

robfantini

@tommyboy180:

The SMTP Auth, SMTP Security, and Use HTML Drop down lists display the default values regardless of your settings. This is a bug, so just be aware that it may be displayed as one thing but it's another. This will be fixed soon now that it's identified.
I will also fix it so the password field will be black and the subject input will reflect on your emails.

you know it would be great if you contributed around here a little faster ;-)

tommyboy180

@robfantini:

@tommyboy180:

The SMTP Auth, SMTP Security, and Use HTML Drop down lists display the default values regardless of your settings. This is a bug, so just be aware that it may be displayed as one thing but it's another. This will be fixed soon now that it's identified.
I will also fix it so the password field will be black and the subject input will reflect on your emails.

you know it would be great if you contributed around here a little faster ;-)

Sorry it's almost been 24 hours since my last version release.
With that being said….. :)

Version 1.9 Released!

Changes:

Fixed all email bugs (see robfantini's post)

The drop down lists now reflect your saved settings. The password can be blank. Your subject input is now the email subject as it should be.

1.9.jpg
1.9.jpg_thumb

kilthro

all i can say is WOW!

The fastest updates I have ever seen lol..
Thanks again!!! This package has made pfsense awesome!

robfantini

@kilthro:

all i can say is WOW!

The fastest updates I have ever seen lol..
Thanks again!!! This package has made pfsense awesome!

OK you might want to edit that.

chpalmer

Ive noticed since uninstalling cron that I have fewer system log entry's than I had before daily before installing cron… Just including this to say that something that was updating is no longer and may be something that was stopping Country Block before..... Interesting...

But...

Awsome Job Tom! Thank You!

tommyboy180

@chpalmer:

Ive noticed since uninstalling cron that I have fewer system log entry's than I had before daily before installing cron… Just including this to say that something that was updating is no longer and may be something that was stopping Country Block before..... Interesting...

But...

Awsome Job Tom! Thank You!

Even with the new cron script that was updated back at version 1.8?
And thank you for your support!

kilthro

@robfantini:

@kilthro:

all i can say is WOW!

The fastest updates I have ever seen lol..
Thanks again!!! This package has made pfsense awesome!

OK you might want to edit that.

Well pfsense is awesome already and the supporting people that keep it top notch make it better than anything else in the league. This package has made it even better for me. It is something that I was looking for that nothing else would offer for me. Well, within a reasonable price that I could afford that is. So to get continued updates/modifications ect is awesome. Even with paid software I havent seen this quick of a turn around when things are identified.

robfantini

@kilthro:

@robfantini:

@kilthro:

all i can say is WOW!

The fastest updates I have ever seen lol..
Thanks again!!! This package has made pfsense awesome!

OK you might want to edit that.

Well pfsense is awesome already and the supporting people that keep it top notch make it better than anything else in the league. This package has made it even better for me. It is something that I was looking for that nothing else would offer for me. Well, within a reasonable price that I could afford that is. So to get continued updates/modifications ect is awesome. Even with paid software I havent seen this quick of a turn around when things are identified.

I agree , and you know my comment was an almost failed attempt at humor.

Seriously CB is something I was waiting for , it has cut our mail server's work load 90% .

darklogic

Way to go TB on the CB. Your updates have been fast and great with awsome enhancements. I do have a request. Is there a way to maintain your saved settings after doing updates. I will always have to put the CIDR back in my whitelist. I whitelist all the BlackBerry RIM IP's and was wondering if there was a way to maintain youe whitelist in between updates?

Thanks again for this awsome package. I do agree it really adds a lot of value to pfsense. Not many firewalls out there that I know of can do this. And please if anyone can think of another firewall that has the ability to do this, please tell.

Thanks,

Matt

kilthro

@robfantini:

@kilthro:

@robfantini:

@kilthro:

all i can say is WOW!

The fastest updates I have ever seen lol..
Thanks again!!! This package has made pfsense awesome!

OK you might want to edit that.

Well pfsense is awesome already and the supporting people that keep it top notch make it better than anything else in the league. This package has made it even better for me. It is something that I was looking for that nothing else would offer for me. Well, within a reasonable price that I could afford that is. So to get continued updates/modifications ect is awesome. Even with paid software I havent seen this quick of a turn around when things are identified.

I agree , and you know my comment was an almost failed attempt at humor.

Seriously CB is something I was waiting for , it has cut our mail server's work load 90% .

lol I got it. Just wanted to give ppl some kudos lol ;D

deltaend

TB, once again, you have my thanks!