IP-Blocklist

p-root

Countryipblocks contacted me about this a couple days ago. I am working on a solution right now.

Thank you tommyboy180 and countryipblocks :)

tommyboy180

@tommyboy180:

Countryipblocks contacted me about this a couple days ago. I am working on a solution right now.

Thank you tommyboy180 and countryipblocks :)

For the countryipblocks PG2 format list you have to link directly to the .txt file. For example, for AFGHANISTAN add the direct link like: https://www.countryipblocks.net/e_country_data/AF_pg2.txt

Try that and see if your lists will now work.

darxmurf

Hi there,

Quick question, I tried to install IP-Blocklist on my 1.2.3 Embedded system.
The installation is ok (tooks few seconds on : Executing custom_php_install_command()…) and then I'v got this message in the config page

Warning: fopen(lists.txt): failed to open stream: Read-only file system in /usr/local/www/packages/ipblocklist/ipblocklist_list.php on line 69 Warning: fwrite(): supplied argument is not a valid stream resource in /usr/local/www/packages/ipblocklist/ipblocklist_list.php on line 70 Warning: fclose(): supplied argument is not a valid stream resource in /usr/local/www/packages/ipblocklist/ipblocklist_list.php on line 75 Warning: filesize(): Stat failed for lists.txt (errno=2 - No such file or directory) in /usr/local/www/packages/ipblocklist/ipblocklist_list.php on line 79

When I try to add a list, it displays this

Warning: fopen(lists.txt): failed to open stream: Read-only file system in /usr/local/www/packages/ipblocklist/ipblocklist_list.php on line 69 Warning: fwrite(): supplied argument is not a valid stream resource in /usr/local/www/packages/ipblocklist/ipblocklist_list.php on line 70 Warning: fwrite(): supplied argument is not a valid stream resource in /usr/local/www/packages/ipblocklist/ipblocklist_list.php on line 72 Warning: fclose(): supplied argument is not a valid stream resource in /usr/local/www/packages/ipblocklist/ipblocklist_list.php on line 75 Warning: filesize(): Stat failed for lists.txt (errno=2 - No such file or directory) in /usr/local/www/packages/ipblocklist/ipblocklist_list.php on line 79

I tried to uninstall/reinstall but same error.
I tried with and without the *Enable IP-Blocklist" box checked
I tried with and without country-block

Cheers

Darx

tommyboy180

@darxmurf:

Hi there,

Quick question, I tried to install IP-Blocklist on my 1.2.3 Embedded system.
The installation is ok (tooks few seconds on : Executing custom_php_install_command()…) and then I'v got this message in the config page

Warning: fopen(lists.txt): failed to open stream: Read-only file system in /usr/local/www/packages/ipblocklist/ipblocklist_list.php on line 69 Warning: fwrite(): supplied argument is not a valid stream resource in /usr/local/www/packages/ipblocklist/ipblocklist_list.php on line 70 Warning: fclose(): supplied argument is not a valid stream resource in /usr/local/www/packages/ipblocklist/ipblocklist_list.php on line 75 Warning: filesize(): Stat failed for lists.txt (errno=2 - No such file or directory) in /usr/local/www/packages/ipblocklist/ipblocklist_list.php on line 79

When I try to add a list, it displays this

Warning: fopen(lists.txt): failed to open stream: Read-only file system in /usr/local/www/packages/ipblocklist/ipblocklist_list.php on line 69 Warning: fwrite(): supplied argument is not a valid stream resource in /usr/local/www/packages/ipblocklist/ipblocklist_list.php on line 70 Warning: fwrite(): supplied argument is not a valid stream resource in /usr/local/www/packages/ipblocklist/ipblocklist_list.php on line 72 Warning: fclose(): supplied argument is not a valid stream resource in /usr/local/www/packages/ipblocklist/ipblocklist_list.php on line 75 Warning: filesize(): Stat failed for lists.txt (errno=2 - No such file or directory) in /usr/local/www/packages/ipblocklist/ipblocklist_list.php on line 79

I tried to uninstall/reinstall but same error.
I tried with and without the *Enable IP-Blocklist" box checked
I tried with and without country-block

Cheers

Darx

It's because you're running embedded. I don't have the time right now to work on embedded (sorry). If you know PHP I can take your fixes and update my package.

g4m3c4ck

All he would have to do is use /tmp instead right? Since the list is pretty much volatile anyways. Not sure where the static parts would go in an embedded system though. Maybe I can throw together an embedded vm and work on it.

g4m3c4ck

@darxmurf:

Hi there,

Quick question, I tried to install IP-Blocklist on my 1.2.3 Embedded system.

Which embedded image are you using?

darxmurf

@tommyboy180:

It's because you're running embedded. I don't have the time right now to work on embedded (sorry). If you know PHP I can take your fixes and update my package.

Okay no problem. I can have a look to modify it.
I was thinking about to run the mount_rw script somewhere and then load the list.
I'll let you know if I found the solution without crashing my system :)

darxmurf

@g4m3c4ck:

@darxmurf:

Hi there,

Quick question, I tried to install IP-Blocklist on my 1.2.3 Embedded system.

Which embedded image are you using?

The 1GB Embeded on a CF Card
1.2.3-RELEASE
built on Mon Dec 7 18:11:25 EST 2009

tommyboy180

@darxmurf:

@g4m3c4ck:

@darxmurf:

Hi there,

Quick question, I tried to install IP-Blocklist on my 1.2.3 Embedded system.

Which embedded image are you using?

The 1GB Embeded on a CF Card
1.2.3-RELEASE
built on Mon Dec 7 18:11:25 EST 2009

Let me get a custom script for you to test. PM me your email.

darxmurf

Well, if I add a : conf_mount_rw(); in the script before the list creation, it should works isn't it ?

JSmorada

I tried ip-blocklist and could never get it to work. It shows that it's running but is always showing that is is blocking 0 Networks/IPs. Currrntly I'm using the CN and IN pg2.txt lists. I tried uninstalling/rebooting and reinstalling and the behavior didn't change. There isn't anything in the system log either:
Feb 2 08:28:16 check_reload_status: syncing firewall
Feb 2 08:27:05 check_reload_status: syncing firewall
Feb 2 08:26:36 syslogd: kernel boot file is /boot/kernel/kernel
Feb 2 08:26:36 syslogd: exiting on signal 15
Feb 2 08:26:25 syslogd: kernel boot file is /boot/kernel/kernel

darxmurf

okay,

I edited the file ipblocklist_list.php

added : require_once('config.inc');
added : conf_mount_rw(); and conf_mount_ro(); around the block line 69.

I can now start and add lists in the ip-blocklist settings but it still displays

Current Status = Running
You are blocking 0 Networks/IPs

Any idea ?

EDIT : When I try to delete a list, it reloads the config page in the iframe in the page ???

tommyboy180

@darxmurf:

okay,

I edited the file ipblocklist_list.php

added : require_once('config.inc');

added : conf_mount_rw(); and conf_mount_ro(); around the block line 69.

I can now start and add lists in the ip-blocklist settings but it still displays

Current Status = Running
You are blocking 0 Networks/IPs

Any idea ?

EDIT : When I try to delete a list, it reloads the config page in the iframe in the page ???

Are you using Firefox or Chrome?

g4m3c4ck

I got Blocking 0 Networks/IP because it was not actually retrieving the lists and putting into the tables at all. Check pfctl -sa | more and see if the table even exists. If not I would check if it is referencing the path properly.

JSmorada

@nipstech:

I tried ip-blocklist and could never get it to work. It shows that it's running but is always showing that is is blocking 0 Networks/IPs. Currrntly I'm using the CN and IN pg2.txt lists. I tried uninstalling/rebooting and reinstalling and the behavior didn't change. There isn't anything in the system log either:
Feb 2 08:28:16 check_reload_status: syncing firewall
Feb 2 08:27:05 check_reload_status: syncing firewall
Feb 2 08:26:36 syslogd: kernel boot file is /boot/kernel/kernel
Feb 2 08:26:36 syslogd: exiting on signal 15
Feb 2 08:26:25 syslogd: kernel boot file is /boot/kernel/kernel

I updated to the latest 2.0 snapshot and was able to get this from the system log:

Feb 2 19:27:58 check_reload_status: syncing firewall
Feb 2 19:27:58 php: /packages/ipblocklist/ipblocklist.php: The command 'rm errorOUT.txt' returned exit code '1', the output was 'rm: errorOUT.txt: No such file or directory'
Feb 2 19:27:58 php: /packages/ipblocklist/ipblocklist.php: The command 'rm -R /usr/local/www/packages/ipblocklist/lists' returned exit code '1', the output was 'rm: /usr/local/www/packages/ipblocklist/lists: No such file or directory'
Feb 2 19:27:58 php: /packages/ipblocklist/ipblocklist.php: The command 'ipfw -f flush' returned exit code '69', the output was 'ipfw: setsockopt(IP_FW_FLUSH): Protocol not available'

tommyboy180

@nipstech:

@nipstech:

I tried ip-blocklist and could never get it to work. It shows that it's running but is always showing that is is blocking 0 Networks/IPs. Currrntly I'm using the CN and IN pg2.txt lists. I tried uninstalling/rebooting and reinstalling and the behavior didn't change. There isn't anything in the system log either:
Feb 2 08:28:16 check_reload_status: syncing firewall
Feb 2 08:27:05 check_reload_status: syncing firewall
Feb 2 08:26:36 syslogd: kernel boot file is /boot/kernel/kernel
Feb 2 08:26:36 syslogd: exiting on signal 15
Feb 2 08:26:25 syslogd: kernel boot file is /boot/kernel/kernel

I updated to the latest 2.0 snapshot and was able to get this from the system log:

Feb 2 19:27:58 check_reload_status: syncing firewall
Feb 2 19:27:58 php: /packages/ipblocklist/ipblocklist.php: The command 'rm errorOUT.txt' returned exit code '1', the output was 'rm: errorOUT.txt: No such file or directory'
Feb 2 19:27:58 php: /packages/ipblocklist/ipblocklist.php: The command 'rm -R /usr/local/www/packages/ipblocklist/lists' returned exit code '1', the output was 'rm: /usr/local/www/packages/ipblocklist/lists: No such file or directory'
Feb 2 19:27:58 php: /packages/ipblocklist/ipblocklist.php: The command 'ipfw -f flush' returned exit code '69', the output was 'ipfw: setsockopt(IP_FW_FLUSH): Protocol not available'

That looks like logs left from re-moving the package. Did you uninstall to try and troubleshoot. I don't use ipfw anymore, I must have left that in the uninstall script. You can safely ignore those errors since ipblocklist uses pcftl for blocking IP ranges.

Here's what you can do to narrow down the problem. SSH into your box and navigate to /usr/local/www/packages/ipblocklist/ and run convert-execute.sh.
Make sure your list is working by pasting in the browser. I just checked the level1 example in the package and it seems like the host is now gone. Try http://iblocklist.rlcassidy.net/files/bt_level1.gz as a lvl1 list and see if this works.

darxmurf

@tommyboy180:

Are you using Firefox or Chrome?

Tested with chrome and firefox.
Also I tried to mount the CF card in RW mode via ssh. I don't have any warning, I can load lists but still have 0 ip blocked

tommyboy180

@darxmurf:

@tommyboy180:

Are you using Firefox or Chrome?

Tested with chrome and firefox.
Also I tried to mount the CF card in RW mode via ssh. I don't have any warning, I can load lists but still have 0 ip blocked

SSH into your box and navigate to /usr/local/www/packages/ipblocklist/ and run convert-execute.sh
Post any errors.

darxmurf

@tommyboy180:

@darxmurf:

@tommyboy180:

Are you using Firefox or Chrome?

Tested with chrome and firefox.
Also I tried to mount the CF card in RW mode via ssh. I don't have any warning, I can load lists but still have 0 ip blocked

SSH into your box and navigate to /usr/local/www/packages/ipblocklist/ and run convert-execute.sh
Post any errors.

Here is :

0 table deleted.
0 table deleted.
./convert-execute.sh: /usr/bin/perl: not found
./convert-execute.sh: /usr/bin/perl: not found
rm: /usr/local/www/packages/ipblocklist/lists/ipfw.ipfwTEMP: No such file or directory
rm: Wlists/whitelistTEMP: No such file or directory
rm: /tmp/rules.debug.tmp: No such file or directory
rm: /tmp/rules.debug.tmp: No such file or directory
0
1
2
..
..
219
220

it displays numbers from 0 to 220

darxmurf

okay, found the solution

I edited the file ipblocklist_list.php

added : require_once('config.inc');
added : conf_mount_rw(); and conf_mount_ro(); around the block line 69

edited the file convert-execute.sh

changed "usr/bin/perl" to "/usr/local/bin/perl"

edited convert.pl

changed "usr/bin/perl" to "/usr/local/bin/perl"

It's now running and blocking the addresses I added in my list

EDIT : how can I verify if it's really working ?
EDIT 2 : I did not edit the whitelist.php file as I'm not using it…