Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IP-Blocklist

    Scheduled Pinned Locked Moved pfSense Packages
    496 Posts 86 Posters 557.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • W
      wm408
      last edited by

      I'm on an embedded pfsense 1.2.3.  I had some errors under the "whitelist" tab on IP-blocklist.

      "Warning: fopen(wlists.txt): failed to open stream: Read-only file system in /usr/local/www/packages/ipblocklist/whitelist.php on line 86 Warning: fwrite(): supplied argument is not a valid stream resource in /usr/local/www/packages/ipblocklist/whitelist.php on line 87 Warning: fclose(): supplied argument is not a valid stream resource in /usr/local/www/packages/ipblocklist/whitelist.php on line 92"

      -I also have a slave 160GB sata drive mounted to /store.  (Kind of cheating for an embedded, might not apply to most)
      -I searched for "wlists.txt" in whitelist.php, while in command mode in vi, typed /wlists.txt
      -changed wlists.txt entry to /store/ipblocklist/wlists.txt.
      -made sure permissions were the same on the original wlists.txt and the new /store/ipblocklist/wlists.txt  (they were, didn't have to modify)

      whitelist tab has no errors now.

      Also, thanks a lot guys for the modifications to the files to get it working on embedded!

      Hey Tommyboy.. any updates on making Internet Explorer/IE functional with ipblocklist?

      I grabbed countryipblocks.net's full pg2 list and removed the US_pg2.txt from the group.  Then did a: cat * > pg2_beast.txt

      wget –no-check-certificate -r -U Mozilla -A "*pg2.txt" www.countryipblocks.net/e_country_data/

      I had to stop the wget once it started to go recursively outside e_country_data, but I got it all.

      Thx so much countryipblocks.net!

      1 Reply Last reply Reply Quote 0
      • D
        darxmurf
        last edited by

        quick question, is it logged somewhere when somebody is blocked ?

        1 Reply Last reply Reply Quote 0
        • W
          wm408
          last edited by

          Wow i did this whole write up on squid and forgot I am in the IP-blocklist thread.   ::)  Think I forget because when IP-blocklist is successful, access denied gets shoved into a squid page.

          @darxmurf:

          quick question, is it logged somewhere when somebody is blocked ?

          1 Reply Last reply Reply Quote 0
          • T
            tommyboy180
            last edited by

            @wm408:

            Wow i did this whole write up on squid and forgot I am in the IP-blocklist thread.   ::)  Think I forget because when IP-blocklist is successful, access denied gets shoved into a squid page.

            @darxmurf:

            quick question, is it logged somewhere when somebody is blocked ?

            lol :)

            To answer the question, it goes into the firewall logs if you checked logging.

            -Tom Schaefer
            SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

            Please support pfBlocker | File Browser | Strikeback

            1 Reply Last reply Reply Quote 0
            • D
              darxmurf
              last edited by

              Sorry, I just saw it after I asked my question

              1 Reply Last reply Reply Quote 0
              • W
                wm408
                last edited by

                Hey Tommyboy, any luck on getting IE to function with this?  I personally use chrome but I want to implement some IP block stuff in a work environment where all they use is IE.

                1 Reply Last reply Reply Quote 0
                • T
                  tommyboy180
                  last edited by

                  @wm408:

                  Hey Tommyboy, any luck on getting IE to function with this?  I personally use chrome but I want to implement some IP block stuff in a work environment where all they use is IE.

                  I've tried to work with IE and it just wont work with me. I kicked it to the curb. If you absolutely need IE then see if the new IE BETA will work.

                  -Tom Schaefer
                  SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                  Please support pfBlocker | File Browser | Strikeback

                  1 Reply Last reply Reply Quote 0
                  • V
                    vg8open
                    last edited by

                    Some of the popular blacklists on the internet change very often.  Is it possible to add a setting for IP-Blocklist to reload the blacklists automatically at a period specified by the user?

                    1 Reply Last reply Reply Quote 0
                    • T
                      tommyboy180
                      last edited by

                      @vg8open:

                      Some of the popular blacklists on the internet change very often.  Is it possible to add a setting for IP-Blocklist to reload the blacklists automatically at a period specified by the user?

                      This has already been answered within this Topic. Please search the topic for the answer you are looking for.

                      -Tom Schaefer
                      SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                      Please support pfBlocker | File Browser | Strikeback

                      1 Reply Last reply Reply Quote 0
                      • V
                        vg8open
                        last edited by

                        I was thinking more along the line of user-friendly web-based GUI setting.  With that said, setting up a cron job will works for me.

                        Thanks

                        1 Reply Last reply Reply Quote 0
                        • T
                          tommyboy180
                          last edited by

                          @vg8open:

                          I was thinking more along the line of user-friendly web-based GUI setting.  With that said, setting up a cron job will works for me.

                          Thanks

                          I could build a GUI for it but the work is already done for me by the Cron Job package. Perhaps I could integrate. Not sure where I want to go with that. We'll see.

                          -Tom Schaefer
                          SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                          Please support pfBlocker | File Browser | Strikeback

                          1 Reply Last reply Reply Quote 0
                          • S
                            Systex
                            last edited by

                            I'm running an embedded install of 2.0Beta5 and tried to make the changes listed in this thread in order to get it to work. However, I accidentally forgot a semicolon after the first line I added (require_once('config.inc')) and when I went to refresh the IP-Blocklist page I got the following error in the textbox:

                            Parse error: syntax error, unexpected T_ECHO in /usr/local/www/packages/ipblocklist/ipblocklist_list.php on line 5

                            Since then, I've tried everything I can to get back to a cleanly-installed state: I've undone the edits I made to that file, and I've even uninstalled and reinstalled the IP-Blacklist package, but whatever I do, I now always get that error. How can I get back to a clean slate without completely reinstalling pfsense?

                            1 Reply Last reply Reply Quote 0
                            • T
                              tommyboy180
                              last edited by

                              @Systex:

                              I'm running an embedded install of 2.0Beta5 and tried to make the changes listed in this thread in order to get it to work. However, I accidentally forgot a semicolon after the first line I added (require_once('config.inc')) and when I went to refresh the IP-Blocklist page I got the following error in the textbox:

                              Parse error: syntax error, unexpected T_ECHO in /usr/local/www/packages/ipblocklist/ipblocklist_list.php on line 5

                              Since then, I've tried everything I can to get back to a cleanly-installed state: I've undone the edits I made to that file, and I've even uninstalled and reinstalled the IP-Blacklist package, but whatever I do, I now always get that error. How can I get back to a clean slate without completely reinstalling pfsense?

                              My best advice is to uninstall the package, check the file system (/usr/local/www/ipblocklist) and delete it, and then reboot. That should help you start from a clean slate.

                              -Tom Schaefer
                              SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                              Please support pfBlocker | File Browser | Strikeback

                              1 Reply Last reply Reply Quote 0
                              • S
                                Systex
                                last edited by

                                @tommyboy180:

                                @Systex:

                                I'm running an embedded install of 2.0Beta5 and tried to make the changes listed in this thread in order to get it to work. However, I accidentally forgot a semicolon after the first line I added (require_once('config.inc')) and when I went to refresh the IP-Blocklist page I got the following error in the textbox:

                                Parse error: syntax error, unexpected T_ECHO in /usr/local/www/packages/ipblocklist/ipblocklist_list.php on line 5

                                Since then, I've tried everything I can to get back to a cleanly-installed state: I've undone the edits I made to that file, and I've even uninstalled and reinstalled the IP-Blacklist package, but whatever I do, I now always get that error. How can I get back to a clean slate without completely reinstalling pfsense?

                                My best advice is to uninstall the package, check the file system (/usr/local/www/ipblocklist) and delete it, and then reboot. That should help you start from a clean slate.

                                Hmm, after uninstalling I looked in /usr/local/www/ and there was no file or directory ipblocklist. I then rebooted, and reinstalled the package. Same exact error as before. The strange thing, is that if I look at the file /usr/local/www/packages/ipblocklist/ipblocklist_list.php, it's the stock, unmodified form (i.e., correct syntax)!? I'm very confused as to what's going on.

                                1 Reply Last reply Reply Quote 0
                                • T
                                  tommyboy180
                                  last edited by

                                  @Systex:

                                  @tommyboy180:

                                  @Systex:

                                  I'm running an embedded install of 2.0Beta5 and tried to make the changes listed in this thread in order to get it to work. However, I accidentally forgot a semicolon after the first line I added (require_once('config.inc')) and when I went to refresh the IP-Blocklist page I got the following error in the textbox:

                                  Parse error: syntax error, unexpected T_ECHO in /usr/local/www/packages/ipblocklist/ipblocklist_list.php on line 5

                                  Since then, I've tried everything I can to get back to a cleanly-installed state: I've undone the edits I made to that file, and I've even uninstalled and reinstalled the IP-Blacklist package, but whatever I do, I now always get that error. How can I get back to a clean slate without completely reinstalling pfsense?

                                  My best advice is to uninstall the package, check the file system (/usr/local/www/ipblocklist) and delete it, and then reboot. That should help you start from a clean slate.

                                  Hmm, after uninstalling I looked in /usr/local/www/ and there was no file or directory ipblocklist. I then rebooted, and reinstalled the package. Same exact error as before. The strange thing, is that if I look at the file /usr/local/www/packages/ipblocklist/ipblocklist_list.php, it's the stock, unmodified form (i.e., correct syntax)!? I'm very confused as to what's going on.

                                  Sorry. The directory is /usr/local/www/packages/ipblocklist/
                                  Uninstall and check to make sure that it's deleted.
                                  Try executing the .sh manually in your console if you get the same error again.

                                  -Tom Schaefer
                                  SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                  Please support pfBlocker | File Browser | Strikeback

                                  1 Reply Last reply Reply Quote 0
                                  • W
                                    wm408
                                    last edited by

                                    Did we ever resolve the IP Blocklist service having this:

                                    Current Status = NOT running

                                    You are blocking 0 Networks/IPs

                                    Even though the "Enable IP-Blocklist" is checked?  It seems to happen after some period of time… haven't figured out how long, usually I check each day and it seems consistent.

                                    I'm using embedded, don't know if its specific to this. (1.2.3-release)

                                    1 Reply Last reply Reply Quote 0
                                    • T
                                      tommyboy180
                                      last edited by

                                      @wm408:

                                      Did we ever resolve the IP Blocklist service having this:

                                      Current Status = NOT running

                                      You are blocking 0 Networks/IPs

                                      Even though the "Enable IP-Blocklist" is checked?  It seems to happen after some period of time… haven't figured out how long, usually I check each day and it seems consistent.

                                      I'm using embedded, don't know if its specific to this.

                                      embedded doesn't like my package for some reason. Let me take some time to get an embedded environment running to get a fix for you here soon. Thanks.

                                      -Tom Schaefer
                                      SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                      Please support pfBlocker | File Browser | Strikeback

                                      1 Reply Last reply Reply Quote 0
                                      • W
                                        wm408
                                        last edited by

                                        Tommyboy we luv ya man.  ;D

                                        @tommyboy180:

                                        @wm408:

                                        Did we ever resolve the IP Blocklist service having this:

                                        Current Status = NOT running

                                        You are blocking 0 Networks/IPs

                                        Even though the "Enable IP-Blocklist" is checked?  It seems to happen after some period of time… haven't figured out how long, usually I check each day and it seems consistent.

                                        I'm using embedded, don't know if its specific to this.

                                        embedded doesn't like my package for some reason. Let me take some time to get an embedded environment running to get a fix for you here soon. Thanks.

                                        1 Reply Last reply Reply Quote 0
                                        • T
                                          tommyboy180
                                          last edited by

                                          @wm408:

                                          Tommyboy we luv ya man.   ;D

                                          @tommyboy180:

                                          @wm408:

                                          Did we ever resolve the IP Blocklist service having this:

                                          Current Status = NOT running

                                          You are blocking 0 Networks/IPs

                                          Even though the "Enable IP-Blocklist" is checked?  It seems to happen after some period of time… haven't figured out how long, usually I check each day and it seems consistent.

                                          I'm using embedded, don't know if its specific to this.

                                          embedded doesn't like my package for some reason. Let me take some time to get an embedded environment running to get a fix for you here soon. Thanks.

                                          I'm having trouble getting an embedded vm running. Is there an easy way to get embedded going within vmware?

                                          -Tom Schaefer
                                          SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                          Please support pfBlocker | File Browser | Strikeback

                                          1 Reply Last reply Reply Quote 0
                                          • W
                                            wm408
                                            last edited by

                                            Tommyboy, because the embedded is an image file, I use physdiskwrite to slap the .img file onto a flash disk.  I always reference this howto as well:

                                            http://pfsense.phoenixkv.net///tutorials/wrap_install/wrap_install.htm

                                            You would probably have to mount the virtual disk made by vmware as a drive on your PC for physdiskwrite to detect it as a drive/partition.  Or something of this nature.  I am assuming you're trying to mount it like you would an ISO image and that won't fly.  Or maybe you're farther ahead than this.  I am not sure.

                                            @tommyboy180:

                                            @wm408:

                                            Tommyboy we luv ya man.   ;D

                                            @tommyboy180:

                                            @wm408:

                                            Did we ever resolve the IP Blocklist service having this:

                                            Current Status = NOT running

                                            You are blocking 0 Networks/IPs

                                            Even though the "Enable IP-Blocklist" is checked?  It seems to happen after some period of time… haven't figured out how long, usually I check each day and it seems consistent.

                                            I'm using embedded, don't know if its specific to this.

                                            embedded doesn't like my package for some reason. Let me take some time to get an embedded environment running to get a fix for you here soon. Thanks.

                                            I'm having trouble getting an embedded vm running. Is there an easy way to get embedded going within vmware?

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.