Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Country Block

    Scheduled Pinned Locked Moved pfSense Packages
    691 Posts 79 Posters 679.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      sdennis
      last edited by

      I wanted to report that following the instructions in this thread, I was successfully able to install Country Block in 1.2.3. and the system is currently 14,384 networks (20 countries).

      I also wanted to say "thank you" because pfSense with Country Block stopped a problem that I'd been having for quite some time.  I run a bulletin board system (yep, we're still out there) that is available via telnet and my poor BBS was just getting absolutely hammered by systems from all over the world such as Egypt, Turkey, UAE, Peru, India, Korea, China, and Russia just to name a few.  Since I installed pfSense and Country Block, things have been "normal".

      Thanks for all the hard work you've put into Country Block.  It's made a world of difference here!

      1 Reply Last reply Reply Quote 0
      • T
        tommyboy180
        last edited by

        @sdennis:

        I wanted to report that following the instructions in this thread, I was successfully able to install Country Block in 1.2.3. and the system is currently 14,384 networks (20 countries).

        I also wanted to say "thank you" because pfSense with Country Block stopped a problem that I'd been having for quite some time.  I run a bulletin board system (yep, we're still out there) that is available via telnet and my poor BBS was just getting absolutely hammered by systems from all over the world such as Egypt, Turkey, UAE, Peru, India, Korea, China, and Russia just to name a few.  Since I installed pfSense and Country Block, things have been "normal".

        Thanks for all the hard work you've put into Country Block.  It's made a world of difference here!

        I'm glad to hear it. That's exactly what countryblock is for, reducing SPAM and unwanted traffic. Thank you for your support!

        -Tom Schaefer
        SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

        Please support pfBlocker | File Browser | Strikeback

        1 Reply Last reply Reply Quote 0
        • G
          g4m3c4ck
          last edited by

          @tommyboy180:

          @g4m3c4ck:

          I just looked over the package a bit and it seems like it could be useful to some. However, I have move all my mail use to the cloud so I am not sure how I could test anything.

          Do you have a 2.0 Developer VM I could copy?

          I just develop on regular 2.0 BETA5.

          How do you compile then?

          1 Reply Last reply Reply Quote 0
          • T
            tommyboy180
            last edited by

            @g4m3c4ck:

            @tommyboy180:

            @g4m3c4ck:

            I just looked over the package a bit and it seems like it could be useful to some. However, I have move all my mail use to the cloud so I am not sure how I could test anything.

            Do you have a 2.0 Developer VM I could copy?

            I just develop on regular 2.0 BETA5.

            How do you compile then?

            I don't compile. All my packages are based on scripts that I wrote.
            Edit: Errr, that is to say I program in assembly or what ever makes me sound cooler :)

            -Tom Schaefer
            SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

            Please support pfBlocker | File Browser | Strikeback

            1 Reply Last reply Reply Quote 0
            • X
              XIII
              last edited by

              @tommyboy180:

              I don't compile. All my packages are based on scripts that I wrote.
              Edit: Errr, that is to say I program in assembly or what ever makes me sound cooler :)

              Your picture says it all but..program is better IMO.

              -Chris Stutzman
              Sys0:2.0.1: AMD Sempron 140 @2.7 1024M RAM 100GHD
              Sys1:2.0.1: Intel P4 @2.66 1024M RAM 40GHD
              freedns.afraid.org - Free DNS dynamic DNS subdomain and domain hosting.
              Check out the pfSense Wiki

              1 Reply Last reply Reply Quote 0
              • T
                tommyboy180
                last edited by

                @XIII:

                @tommyboy180:

                I don't compile. All my packages are based on scripts that I wrote.
                Edit: Errr, that is to say I program in assembly or what ever makes me sound cooler :)

                Your picture says it all but..program is better IMO.

                Why program something when you can script it easily? This not only makes it easy for you to distribute but also easy for users to debug and modify for their own use. I think scripting when you can gives you and your users more power.

                -Tom Schaefer
                SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                Please support pfBlocker | File Browser | Strikeback

                1 Reply Last reply Reply Quote 0
                • X
                  XIII
                  last edited by

                  I know scripting is easier and I agree with all the points you made but I was just saying that one sounds better than the other, not that it is easier or is actually better in practice.

                  -Chris Stutzman
                  Sys0:2.0.1: AMD Sempron 140 @2.7 1024M RAM 100GHD
                  Sys1:2.0.1: Intel P4 @2.66 1024M RAM 40GHD
                  freedns.afraid.org - Free DNS dynamic DNS subdomain and domain hosting.
                  Check out the pfSense Wiki

                  1 Reply Last reply Reply Quote 0
                  • G
                    g4m3c4ck
                    last edited by

                    Only reason I asked about compiling because It is needed to create the binaries from source. I was not necessarily suggesting you code :)

                    1 Reply Last reply Reply Quote 0
                    • T
                      Trufelli
                      last edited by

                      I'm using pFsense 1.2.3 release and I'm getting this error:

                      Current Status = NOT running
                      /tmp/rules.debug:134: rule label too long (max 63 chars)
                      You are blocking 0 Networks

                      I got all country blocked except where I live. I am using the following packages:

                      • Dashboard
                      • Fit123
                      • Bandwidthd
                      • Rate
                      • Squid

                      Already uninstalled the package of CB and reinstaled, but I got the same error.

                      1 Reply Last reply Reply Quote 0
                      • T
                        tommyboy180
                        last edited by

                        @Trufelli:

                        I'm using pFsense 1.2.3 release and I'm getting this error:

                        Current Status = NOT running
                        /tmp/rules.debug:134: rule label too long (max 63 chars)
                        You are blocking 0 Networks

                        I got all country blocked except where I live. I am using the following packages:

                        • Dashboard
                        • Fit123
                        • Bandwidthd
                        • Rate
                        • Squid

                        Already uninstalled the package of CB and reinstaled, but I got the same error.

                        How many firewall entries do you have? Does it work for a little while after you reboot?

                        -Tom Schaefer
                        SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                        Please support pfBlocker | File Browser | Strikeback

                        1 Reply Last reply Reply Quote 0
                        • T
                          Trufelli
                          last edited by

                          It's a fresh install… I only have 2 rules on LAN and other 2 rules on the WAN... After I reboot this message appears in the WEB as soon I open , so I think don't work for a litle while...

                          1 Reply Last reply Reply Quote 0
                          • T
                            tommyboy180
                            last edited by

                            Try just selecting one country, commit, and then save/update. Reboot if you still have that error.
                            I suspect you should be able to get one country working to begin with. Since it's a fresh install I wonder if any of the other packages are messing with it.

                            -Tom Schaefer
                            SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                            Please support pfBlocker | File Browser | Strikeback

                            1 Reply Last reply Reply Quote 0
                            • T
                              Trufelli
                              last edited by

                              Unselect all countries and comited… Then I just select one and comited again... When i did this, i saw that the checkbox for "Enable" becomes unchecked... So, I checked the "Enable" box and saved... Then it start runing normaly... To test, I select another country, and comited... The "Enable" becomes uncheked again... I turnet on the CB again and was runing fine... Now I checked all countries that i wanted and comited... Again, the "Enable" becomes uncheked... I checked it and start normaly...

                              Current Status = Running

                              You are blocking 109524 Networks

                              Don't know what happening , because i tried do that befoure posting here...

                              Let's see if the BC works fine now!!

                              Tanks for your help and job!! Its a realy nice Package!!!

                              :D

                              1 Reply Last reply Reply Quote 0
                              • G
                                g4m3c4ck
                                last edited by

                                FYI. I just upgraded my pf2.0 vm to RC1. I was having problems with b5 so I decided to update it. I reset pfsense to factory defaults from console and I noticed on the boot afterwards the the country block script was still present. I was not able to access the webgui to remove country block prior to upgrading.

                                After installing countryblock on the new build I get this.

                                /tmp/rules.debug:74 Cannot load "/usr/local/www/packages/countryblock/countries-white.txt" No such file or directory

                                I know this is no real big bug but I just thought you should know

                                1 Reply Last reply Reply Quote 0
                                • G
                                  g4m3c4ck
                                  last edited by

                                  I am having tons of issues with RC1 not related to CB. However, my system.log is reporting missing dependencies with RC1. I will look into this further and keep you updated.

                                  1 Reply Last reply Reply Quote 0
                                  • T
                                    tommyboy180
                                    last edited by

                                    @g4m3c4ck:

                                    I am having tons of issues with RC1 not related to CB. However, my system.log is reporting missing dependencies with RC1. I will look into this further and keep you updated.

                                    I see a lot of packages that do the same thing. I'm not sure what generates that but ignoring those errors doen't hurt. Let me know if you narrow it down to something. I looked into it a while ago and came back empty handed. I would love to fix it if it's possible.
                                    Thanks for the heads up!

                                    -Tom Schaefer
                                    SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                    Please support pfBlocker | File Browser | Strikeback

                                    1 Reply Last reply Reply Quote 0
                                    • D
                                      dlawley
                                      last edited by

                                      Country Block , blocked?

                                      To help us defray burgeoning costs, we have temporarily suspended automated downloads of Access Control Lists. We would like to restore these or move to a members only delivery system. Please help us by donating now:

                                      Does this affect your script?  If I have to download manually, what format should I grab…

                                      1 Reply Last reply Reply Quote 0
                                      • T
                                        tommyboy180
                                        last edited by

                                        @dlawley:

                                        Country Block , blocked?

                                        To help us defray burgeoning costs, we have temporarily suspended automated downloads of Access Control Lists. We would like to restore these or move to a members only delivery system. Please help us by donating now:

                                        Does this affect your script?  If I have to download manually, what format should I grab…

                                        There is an updated countryblock package that I released several days ago. Update and it should work.

                                        -Tom Schaefer
                                        SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                        Please support pfBlocker | File Browser | Strikeback

                                        1 Reply Last reply Reply Quote 0
                                        • D
                                          dlawley
                                          last edited by

                                          just updated to 0.2.0,

                                          /usr/local/www/packages/countryblock/lists/countries.txt is 0 bytes

                                          It says I have have 11 of 252 selected but 0 blocked, indicates it is running

                                          1 Reply Last reply Reply Quote 0
                                          • T
                                            tommyboy180
                                            last edited by

                                            @dlawley:

                                            just updated to 0.2.0,

                                            /usr/local/www/packages/countryblock/lists/countries.txt is 0 bytes

                                            It says I have have 11 of 252 selected but 0 blocked, indicates it is running

                                            What pfsense version?

                                            -Tom Schaefer
                                            SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                            Please support pfBlocker | File Browser | Strikeback

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.