Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Country Block

    Scheduled Pinned Locked Moved pfSense Packages
    691 Posts 79 Posters 683.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      tommyboy180
      last edited by

      @XIII:

      @tommyboy180:

      I don't compile. All my packages are based on scripts that I wrote.
      Edit: Errr, that is to say I program in assembly or what ever makes me sound cooler :)

      Your picture says it all but..program is better IMO.

      Why program something when you can script it easily? This not only makes it easy for you to distribute but also easy for users to debug and modify for their own use. I think scripting when you can gives you and your users more power.

      -Tom Schaefer
      SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

      Please support pfBlocker | File Browser | Strikeback

      1 Reply Last reply Reply Quote 0
      • X
        XIII
        last edited by

        I know scripting is easier and I agree with all the points you made but I was just saying that one sounds better than the other, not that it is easier or is actually better in practice.

        -Chris Stutzman
        Sys0:2.0.1: AMD Sempron 140 @2.7 1024M RAM 100GHD
        Sys1:2.0.1: Intel P4 @2.66 1024M RAM 40GHD
        freedns.afraid.org - Free DNS dynamic DNS subdomain and domain hosting.
        Check out the pfSense Wiki

        1 Reply Last reply Reply Quote 0
        • G
          g4m3c4ck
          last edited by

          Only reason I asked about compiling because It is needed to create the binaries from source. I was not necessarily suggesting you code :)

          1 Reply Last reply Reply Quote 0
          • T
            Trufelli
            last edited by

            I'm using pFsense 1.2.3 release and I'm getting this error:

            Current Status = NOT running
            /tmp/rules.debug:134: rule label too long (max 63 chars)
            You are blocking 0 Networks

            I got all country blocked except where I live. I am using the following packages:

            • Dashboard
            • Fit123
            • Bandwidthd
            • Rate
            • Squid

            Already uninstalled the package of CB and reinstaled, but I got the same error.

            1 Reply Last reply Reply Quote 0
            • T
              tommyboy180
              last edited by

              @Trufelli:

              I'm using pFsense 1.2.3 release and I'm getting this error:

              Current Status = NOT running
              /tmp/rules.debug:134: rule label too long (max 63 chars)
              You are blocking 0 Networks

              I got all country blocked except where I live. I am using the following packages:

              • Dashboard
              • Fit123
              • Bandwidthd
              • Rate
              • Squid

              Already uninstalled the package of CB and reinstaled, but I got the same error.

              How many firewall entries do you have? Does it work for a little while after you reboot?

              -Tom Schaefer
              SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

              Please support pfBlocker | File Browser | Strikeback

              1 Reply Last reply Reply Quote 0
              • T
                Trufelli
                last edited by

                It's a fresh install… I only have 2 rules on LAN and other 2 rules on the WAN... After I reboot this message appears in the WEB as soon I open , so I think don't work for a litle while...

                1 Reply Last reply Reply Quote 0
                • T
                  tommyboy180
                  last edited by

                  Try just selecting one country, commit, and then save/update. Reboot if you still have that error.
                  I suspect you should be able to get one country working to begin with. Since it's a fresh install I wonder if any of the other packages are messing with it.

                  -Tom Schaefer
                  SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                  Please support pfBlocker | File Browser | Strikeback

                  1 Reply Last reply Reply Quote 0
                  • T
                    Trufelli
                    last edited by

                    Unselect all countries and comited… Then I just select one and comited again... When i did this, i saw that the checkbox for "Enable" becomes unchecked... So, I checked the "Enable" box and saved... Then it start runing normaly... To test, I select another country, and comited... The "Enable" becomes uncheked again... I turnet on the CB again and was runing fine... Now I checked all countries that i wanted and comited... Again, the "Enable" becomes uncheked... I checked it and start normaly...

                    Current Status = Running

                    You are blocking 109524 Networks

                    Don't know what happening , because i tried do that befoure posting here...

                    Let's see if the BC works fine now!!

                    Tanks for your help and job!! Its a realy nice Package!!!

                    :D

                    1 Reply Last reply Reply Quote 0
                    • G
                      g4m3c4ck
                      last edited by

                      FYI. I just upgraded my pf2.0 vm to RC1. I was having problems with b5 so I decided to update it. I reset pfsense to factory defaults from console and I noticed on the boot afterwards the the country block script was still present. I was not able to access the webgui to remove country block prior to upgrading.

                      After installing countryblock on the new build I get this.

                      /tmp/rules.debug:74 Cannot load "/usr/local/www/packages/countryblock/countries-white.txt" No such file or directory

                      I know this is no real big bug but I just thought you should know

                      1 Reply Last reply Reply Quote 0
                      • G
                        g4m3c4ck
                        last edited by

                        I am having tons of issues with RC1 not related to CB. However, my system.log is reporting missing dependencies with RC1. I will look into this further and keep you updated.

                        1 Reply Last reply Reply Quote 0
                        • T
                          tommyboy180
                          last edited by

                          @g4m3c4ck:

                          I am having tons of issues with RC1 not related to CB. However, my system.log is reporting missing dependencies with RC1. I will look into this further and keep you updated.

                          I see a lot of packages that do the same thing. I'm not sure what generates that but ignoring those errors doen't hurt. Let me know if you narrow it down to something. I looked into it a while ago and came back empty handed. I would love to fix it if it's possible.
                          Thanks for the heads up!

                          -Tom Schaefer
                          SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                          Please support pfBlocker | File Browser | Strikeback

                          1 Reply Last reply Reply Quote 0
                          • D
                            dlawley
                            last edited by

                            Country Block , blocked?

                            To help us defray burgeoning costs, we have temporarily suspended automated downloads of Access Control Lists. We would like to restore these or move to a members only delivery system. Please help us by donating now:

                            Does this affect your script?  If I have to download manually, what format should I grab…

                            1 Reply Last reply Reply Quote 0
                            • T
                              tommyboy180
                              last edited by

                              @dlawley:

                              Country Block , blocked?

                              To help us defray burgeoning costs, we have temporarily suspended automated downloads of Access Control Lists. We would like to restore these or move to a members only delivery system. Please help us by donating now:

                              Does this affect your script?  If I have to download manually, what format should I grab…

                              There is an updated countryblock package that I released several days ago. Update and it should work.

                              -Tom Schaefer
                              SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                              Please support pfBlocker | File Browser | Strikeback

                              1 Reply Last reply Reply Quote 0
                              • D
                                dlawley
                                last edited by

                                just updated to 0.2.0,

                                /usr/local/www/packages/countryblock/lists/countries.txt is 0 bytes

                                It says I have have 11 of 252 selected but 0 blocked, indicates it is running

                                1 Reply Last reply Reply Quote 0
                                • T
                                  tommyboy180
                                  last edited by

                                  @dlawley:

                                  just updated to 0.2.0,

                                  /usr/local/www/packages/countryblock/lists/countries.txt is 0 bytes

                                  It says I have have 11 of 252 selected but 0 blocked, indicates it is running

                                  What pfsense version?

                                  -Tom Schaefer
                                  SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                  Please support pfBlocker | File Browser | Strikeback

                                  1 Reply Last reply Reply Quote 0
                                  • D
                                    dlawley
                                    last edited by

                                    Sorry did not put that in the original message, well seasoned 1.2.3.  Just did a reboot but no joy.  countries.txt in the list folder still 0

                                    1 Reply Last reply Reply Quote 0
                                    • T
                                      tommyboy180
                                      last edited by

                                      That's really strange. Alright give me 5 min to check on my 1.2.3 test vm.

                                      -Tom Schaefer
                                      SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                      Please support pfBlocker | File Browser | Strikeback

                                      1 Reply Last reply Reply Quote 0
                                      • D
                                        dlawley
                                        last edited by

                                        Anything look out of order?

                                        2011-02-15_121228.jpg
                                        2011-02-15_121228.jpg_thumb

                                        1 Reply Last reply Reply Quote 0
                                        • T
                                          tommyboy180
                                          last edited by

                                          That looks right. I just tested on my 1.2.3 VM. I uninstalled my CB package, rebooted, and then installed the package version 2.0. Make sure CIDR.tar.gz is downloaded during the install.

                                          I checked Korea, committed, then checked enabled and hit Save/Update.

                                          All worked fine. Try my method and let me know what happens.

                                          -Tom Schaefer
                                          SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                          Please support pfBlocker | File Browser | Strikeback

                                          1 Reply Last reply Reply Quote 0
                                          • D
                                            dlawley
                                            last edited by

                                            Thanks, was just looking and first glance it appears that the fetch lines are commented out in countryblock.php

                                            lunch time, brain food… tackle this after lunch

                                            //Process each list URL, Extract, and put in DIR lists
                                            exec("mkdir lists");
                                            foreach ($lines as $line) {
                                            //echo("fetch -o lists http://www.countryipblocks.net/e_country_data/{$line}_cidr.txt");
                                            //Fetch countries from server
                                            //exec("fetch -o lists/temp http://127.0.0.1//packages/countryblock/CIDR/{$line}_cidr.txt");
                                            //Pull from local file since https or http on other ports may be used
                                            exec("cat CIDR/{$line}_cidr.txt >> lists/countries.txt");
                                            //exec("fetch -o lists/temp http://www.countryipblocks.net/e_country_data/{$line}_cidr.txt");
                                            //Remove cat lists/temp since fetch is not used
                                            //Thank you g4m3c4ck, 'He got a real pretty mouth ain't he', 1 Feb 2011
                                            //exec("cat lists/temp >> lists/countries.txt");
                                            $filename = basename($line);
                                            //Extract list
                                            //exec("gzip -d lists/$filename");
                                            }

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.