Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Country Block

    Scheduled Pinned Locked Moved pfSense Packages
    691 Posts 79 Posters 682.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      Cino
      last edited by

      Figured I would give this package try on the latest 2.0beta5 build. Package says its running and i can confirm ip networks using pfctl. In my system log, I'm seeing the below errors tho:

      Feb 4 16:14:53 	php: /packages/countryblock/countryblock.php: The command 'rm lists/temp' returned exit code '1', the output was 'rm: lists/temp: No such file or directory'
      Feb 4 16:14:41 	php: /packages/countryblock/countryblock.php: The command 'rm errorOUT.txt' returned exit code '1', the output was 'rm: errorOUT.txt: No such file or directory'
      Feb 4 16:14:41 	php: /packages/countryblock/countryblock.php: The command 'rm -R /usr/local/www/packages/countryblock/lists' returned exit code '1', the output was 'rm: /usr/local/www/packages/countryblock/lists: No such file or directory'
      

      the files and directories are there, wondering if its because how the path is setup for the commands

      BTW, great work on this package!

      1 Reply Last reply Reply Quote 0
      • S
        sdennis
        last edited by

        I wanted to report that following the instructions in this thread, I was successfully able to install Country Block in 1.2.3. and the system is currently 14,384 networks (20 countries).

        I also wanted to say "thank you" because pfSense with Country Block stopped a problem that I'd been having for quite some time.  I run a bulletin board system (yep, we're still out there) that is available via telnet and my poor BBS was just getting absolutely hammered by systems from all over the world such as Egypt, Turkey, UAE, Peru, India, Korea, China, and Russia just to name a few.  Since I installed pfSense and Country Block, things have been "normal".

        Thanks for all the hard work you've put into Country Block.  It's made a world of difference here!

        1 Reply Last reply Reply Quote 0
        • T
          tommyboy180
          last edited by

          @sdennis:

          I wanted to report that following the instructions in this thread, I was successfully able to install Country Block in 1.2.3. and the system is currently 14,384 networks (20 countries).

          I also wanted to say "thank you" because pfSense with Country Block stopped a problem that I'd been having for quite some time.  I run a bulletin board system (yep, we're still out there) that is available via telnet and my poor BBS was just getting absolutely hammered by systems from all over the world such as Egypt, Turkey, UAE, Peru, India, Korea, China, and Russia just to name a few.  Since I installed pfSense and Country Block, things have been "normal".

          Thanks for all the hard work you've put into Country Block.  It's made a world of difference here!

          I'm glad to hear it. That's exactly what countryblock is for, reducing SPAM and unwanted traffic. Thank you for your support!

          -Tom Schaefer
          SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

          Please support pfBlocker | File Browser | Strikeback

          1 Reply Last reply Reply Quote 0
          • G
            g4m3c4ck
            last edited by

            @tommyboy180:

            @g4m3c4ck:

            I just looked over the package a bit and it seems like it could be useful to some. However, I have move all my mail use to the cloud so I am not sure how I could test anything.

            Do you have a 2.0 Developer VM I could copy?

            I just develop on regular 2.0 BETA5.

            How do you compile then?

            1 Reply Last reply Reply Quote 0
            • T
              tommyboy180
              last edited by

              @g4m3c4ck:

              @tommyboy180:

              @g4m3c4ck:

              I just looked over the package a bit and it seems like it could be useful to some. However, I have move all my mail use to the cloud so I am not sure how I could test anything.

              Do you have a 2.0 Developer VM I could copy?

              I just develop on regular 2.0 BETA5.

              How do you compile then?

              I don't compile. All my packages are based on scripts that I wrote.
              Edit: Errr, that is to say I program in assembly or what ever makes me sound cooler :)

              -Tom Schaefer
              SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

              Please support pfBlocker | File Browser | Strikeback

              1 Reply Last reply Reply Quote 0
              • X
                XIII
                last edited by

                @tommyboy180:

                I don't compile. All my packages are based on scripts that I wrote.
                Edit: Errr, that is to say I program in assembly or what ever makes me sound cooler :)

                Your picture says it all but..program is better IMO.

                -Chris Stutzman
                Sys0:2.0.1: AMD Sempron 140 @2.7 1024M RAM 100GHD
                Sys1:2.0.1: Intel P4 @2.66 1024M RAM 40GHD
                freedns.afraid.org - Free DNS dynamic DNS subdomain and domain hosting.
                Check out the pfSense Wiki

                1 Reply Last reply Reply Quote 0
                • T
                  tommyboy180
                  last edited by

                  @XIII:

                  @tommyboy180:

                  I don't compile. All my packages are based on scripts that I wrote.
                  Edit: Errr, that is to say I program in assembly or what ever makes me sound cooler :)

                  Your picture says it all but..program is better IMO.

                  Why program something when you can script it easily? This not only makes it easy for you to distribute but also easy for users to debug and modify for their own use. I think scripting when you can gives you and your users more power.

                  -Tom Schaefer
                  SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                  Please support pfBlocker | File Browser | Strikeback

                  1 Reply Last reply Reply Quote 0
                  • X
                    XIII
                    last edited by

                    I know scripting is easier and I agree with all the points you made but I was just saying that one sounds better than the other, not that it is easier or is actually better in practice.

                    -Chris Stutzman
                    Sys0:2.0.1: AMD Sempron 140 @2.7 1024M RAM 100GHD
                    Sys1:2.0.1: Intel P4 @2.66 1024M RAM 40GHD
                    freedns.afraid.org - Free DNS dynamic DNS subdomain and domain hosting.
                    Check out the pfSense Wiki

                    1 Reply Last reply Reply Quote 0
                    • G
                      g4m3c4ck
                      last edited by

                      Only reason I asked about compiling because It is needed to create the binaries from source. I was not necessarily suggesting you code :)

                      1 Reply Last reply Reply Quote 0
                      • T
                        Trufelli
                        last edited by

                        I'm using pFsense 1.2.3 release and I'm getting this error:

                        Current Status = NOT running
                        /tmp/rules.debug:134: rule label too long (max 63 chars)
                        You are blocking 0 Networks

                        I got all country blocked except where I live. I am using the following packages:

                        • Dashboard
                        • Fit123
                        • Bandwidthd
                        • Rate
                        • Squid

                        Already uninstalled the package of CB and reinstaled, but I got the same error.

                        1 Reply Last reply Reply Quote 0
                        • T
                          tommyboy180
                          last edited by

                          @Trufelli:

                          I'm using pFsense 1.2.3 release and I'm getting this error:

                          Current Status = NOT running
                          /tmp/rules.debug:134: rule label too long (max 63 chars)
                          You are blocking 0 Networks

                          I got all country blocked except where I live. I am using the following packages:

                          • Dashboard
                          • Fit123
                          • Bandwidthd
                          • Rate
                          • Squid

                          Already uninstalled the package of CB and reinstaled, but I got the same error.

                          How many firewall entries do you have? Does it work for a little while after you reboot?

                          -Tom Schaefer
                          SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                          Please support pfBlocker | File Browser | Strikeback

                          1 Reply Last reply Reply Quote 0
                          • T
                            Trufelli
                            last edited by

                            It's a fresh install… I only have 2 rules on LAN and other 2 rules on the WAN... After I reboot this message appears in the WEB as soon I open , so I think don't work for a litle while...

                            1 Reply Last reply Reply Quote 0
                            • T
                              tommyboy180
                              last edited by

                              Try just selecting one country, commit, and then save/update. Reboot if you still have that error.
                              I suspect you should be able to get one country working to begin with. Since it's a fresh install I wonder if any of the other packages are messing with it.

                              -Tom Schaefer
                              SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                              Please support pfBlocker | File Browser | Strikeback

                              1 Reply Last reply Reply Quote 0
                              • T
                                Trufelli
                                last edited by

                                Unselect all countries and comited… Then I just select one and comited again... When i did this, i saw that the checkbox for "Enable" becomes unchecked... So, I checked the "Enable" box and saved... Then it start runing normaly... To test, I select another country, and comited... The "Enable" becomes uncheked again... I turnet on the CB again and was runing fine... Now I checked all countries that i wanted and comited... Again, the "Enable" becomes uncheked... I checked it and start normaly...

                                Current Status = Running

                                You are blocking 109524 Networks

                                Don't know what happening , because i tried do that befoure posting here...

                                Let's see if the BC works fine now!!

                                Tanks for your help and job!! Its a realy nice Package!!!

                                :D

                                1 Reply Last reply Reply Quote 0
                                • G
                                  g4m3c4ck
                                  last edited by

                                  FYI. I just upgraded my pf2.0 vm to RC1. I was having problems with b5 so I decided to update it. I reset pfsense to factory defaults from console and I noticed on the boot afterwards the the country block script was still present. I was not able to access the webgui to remove country block prior to upgrading.

                                  After installing countryblock on the new build I get this.

                                  /tmp/rules.debug:74 Cannot load "/usr/local/www/packages/countryblock/countries-white.txt" No such file or directory

                                  I know this is no real big bug but I just thought you should know

                                  1 Reply Last reply Reply Quote 0
                                  • G
                                    g4m3c4ck
                                    last edited by

                                    I am having tons of issues with RC1 not related to CB. However, my system.log is reporting missing dependencies with RC1. I will look into this further and keep you updated.

                                    1 Reply Last reply Reply Quote 0
                                    • T
                                      tommyboy180
                                      last edited by

                                      @g4m3c4ck:

                                      I am having tons of issues with RC1 not related to CB. However, my system.log is reporting missing dependencies with RC1. I will look into this further and keep you updated.

                                      I see a lot of packages that do the same thing. I'm not sure what generates that but ignoring those errors doen't hurt. Let me know if you narrow it down to something. I looked into it a while ago and came back empty handed. I would love to fix it if it's possible.
                                      Thanks for the heads up!

                                      -Tom Schaefer
                                      SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                      Please support pfBlocker | File Browser | Strikeback

                                      1 Reply Last reply Reply Quote 0
                                      • D
                                        dlawley
                                        last edited by

                                        Country Block , blocked?

                                        To help us defray burgeoning costs, we have temporarily suspended automated downloads of Access Control Lists. We would like to restore these or move to a members only delivery system. Please help us by donating now:

                                        Does this affect your script?  If I have to download manually, what format should I grab…

                                        1 Reply Last reply Reply Quote 0
                                        • T
                                          tommyboy180
                                          last edited by

                                          @dlawley:

                                          Country Block , blocked?

                                          To help us defray burgeoning costs, we have temporarily suspended automated downloads of Access Control Lists. We would like to restore these or move to a members only delivery system. Please help us by donating now:

                                          Does this affect your script?  If I have to download manually, what format should I grab…

                                          There is an updated countryblock package that I released several days ago. Update and it should work.

                                          -Tom Schaefer
                                          SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                          Please support pfBlocker | File Browser | Strikeback

                                          1 Reply Last reply Reply Quote 0
                                          • D
                                            dlawley
                                            last edited by

                                            just updated to 0.2.0,

                                            /usr/local/www/packages/countryblock/lists/countries.txt is 0 bytes

                                            It says I have have 11 of 252 selected but 0 blocked, indicates it is running

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.