Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Country Block

    Scheduled Pinned Locked Moved pfSense Packages
    691 Posts 79 Posters 761.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      Supermule Banned
      last edited by

      You can add a cron job…..

      I cant remember which file to add to the job, but Tom knows.....:)

      1 Reply Last reply Reply Quote 0
      • M
        mst
        last edited by

        I have the same problem even after setting up the cron. Have to manually enable it and then it works. 2.0 beta 5 …...

        I have fallowed this thread with cron guidance but it looks like it does not work .....

        Please advice

        1 Reply Last reply Reply Quote 0
        • J
          JackANSI
          last edited by

          When you check "Enable Logging?" in the settings page, where is it being logged to?

          1 Reply Last reply Reply Quote 0
          • T
            tommyboy180
            last edited by

            @JackANSI:

            When you check "Enable Logging?" in the settings page, where is it being logged to?

            The firewall tab under system logs.

            -Tom Schaefer
            SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

            Please support pfBlocker | File Browser | Strikeback

            1 Reply Last reply Reply Quote 0
            • X
              XIII
              last edited by

              @tommyboy180:

              Thank you. I appreciate the kind words. I'm sure many other package managers are just the same.

              I am only referring to my personal experience in contacting you. I know most if not all are very excellent.

              For the cron job the command is : /usr/local/etc/rc.d/countryblock.sh

              -Chris Stutzman
              Sys0:2.0.1: AMD Sempron 140 @2.7 1024M RAM 100GHD
              Sys1:2.0.1: Intel P4 @2.66 1024M RAM 40GHD
              freedns.afraid.org - Free DNS dynamic DNS subdomain and domain hosting.
              Check out the pfSense Wiki

              1 Reply Last reply Reply Quote 0
              • G
                ghm
                last edited by

                @XIII:

                For the cron job the command is : /usr/local/etc/rc.d/countryblock.sh

                I have now installed the Cron package as well, reinstalled Country Block and added the above command (every */5 minutes). It does not restart Country Block properly.  I do see the following in Syslog every 5 minutes:

                root: Countryblock was found not running
                

                Is there a restart option that I need to add or is 5min to long - or else?

                Thanks!

                1 Reply Last reply Reply Quote 0
                • S
                  Supermule Banned
                  last edited by

                  Is it possible to build a cron job as a part of CB?? So it does this automatically??

                  1 Reply Last reply Reply Quote 0
                  • S
                    Supermule Banned
                    last edited by

                    My cronjob is not working either…...it starts the package every minute.

                    Not running is the current status and the Cron doesnt start it.

                    1 Reply Last reply Reply Quote 0
                    • M
                      mst
                      last edited by

                      After I go into the topic more deeply, I have found that Country Block is running. Problem was with crone ( */5 ) => (0) fixed the problem.

                      Also:

                      ![country block.JPG](/public/imported_attachments/1/country block.JPG)
                      ![country block.JPG_thumb](/public/imported_attachments/1/country block.JPG_thumb)

                      1 Reply Last reply Reply Quote 0
                      • S
                        Supermule Banned
                        last edited by

                        But then it runs all the time….

                        Not optimal...

                        @mst:

                        After I go into the topic more deeply, I have found that Country Block is running. Problem was with crone ( */5 ) => (0) fixed the problem.

                        Also:

                        1 Reply Last reply Reply Quote 0
                        • T
                          tommyboy180
                          last edited by

                          @Supermule:

                          But then it runs all the time….

                          Not optimal...

                          @mst:

                          After I go into the topic more deeply, I have found that Country Block is running. Problem was with crone ( */5 ) => (0) fixed the problem.

                          Also:

                          The cron script checks to see if countryblock is running. If it is then it will exit and if countryblock is not running then it will attempt to start the package. It's fine.

                          -Tom Schaefer
                          SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                          Please support pfBlocker | File Browser | Strikeback

                          1 Reply Last reply Reply Quote 0
                          • G
                            ghm
                            last edited by

                            @tommyboy180:

                            The cron script checks to see if countryblock is running. If it is then it will exit and if countryblock is not running then it will attempt to start the package. It's fine.

                            …still only get```
                            root: Countryblock was found not running

                            1 Reply Last reply Reply Quote 0
                            • M
                              mst
                              last edited by

                              sorry false alarm….. I was too happy ....

                              after almost one day of working get this again:

                              Current Status = NOT running
                              no IP address found for __csrf_magic

                              I used firefox ....

                              1 Reply Last reply Reply Quote 0
                              • G
                                ghm
                                last edited by

                                @tommyboy180:

                                The cron script checks to see if countryblock is running. If it is then it will exit and if countryblock is not running then it will attempt to start the package. It's fine.

                                I've now executed the command manually - and the status page now shows:```
                                Current Status = NOT running
                                /tmp/rules.debug:79: cannot load "/usr/local/www/packages/countryblock/lists/countries.txt": No such file or directory
                                You are blocking 0 Networks

                                
                                Again, if I start CountryBlock manually via the WebIF its runs until the next PPPOE restart.
                                But the command /usr/local/etc/rc.d/countryblock.sh does not restart it.
                                In fact I get this if I execute it manually (yes, it echoes "not running" and then the contents is printed,,,):
                                

                                $ /usr/local/etc/rc.d/countryblock.sh
                                not running
                                Content-type: text/html

                                #version 2.0
                                #check if countryblock running
                                export resultr=pfctl -s rules | grep -c countryblock
                                #echo $resultr
                                if [ "$resultr" -gt "0" ]; then
                                echo running
                                exit 1
                                else
                                echo not running
                                /usr/bin/logger -s "Countryblock was found not running"
                                echo "Countryblock not running" | /usr/local/bin/php /usr/local/www/packages/countryblock/email_send.php
                                fi

                                pfctl -t countryblock -T kill
                                sed -i -e '/countryblock/d' /tmp/rules.debug

                                #Now edit /tmp/rules.debug

                                #find my line for table
                                export i=grep -n 'block quick from any to <snort2c>' /tmp/rules.debug | grep -o '[0-9]\{2,4\}'
                                export t=grep -n 'User Aliases' /tmp/rules.debug |grep -o '[0-9]\{1,2\}'

                                i=$(($i+'1'))
                                t=$(($t+'1'))
                                #i = line where <snort2c>is
                                #t is where 'User Aliases' is
                                echo $i
                                echo $t

                                rm /tmp/rules.debug.tmp

                                #Insert table-entry limit
                                sed -i -e '/900000/d' /tmp/rules.debug
                                while read line
                                do a=$(($a+1));
                                #echo $a;
                                if [ "$a" = "$t" ]; then
                                echo "" >> /tmp/rules.debug.tmp
                                echo "set limit table-entries 900000" >> /tmp/rules.debug.tmp
                                fi
                                echo $line >> /tmp/rules.debug.tmp
                                done < "/tmp/rules.debug"

                                mv /tmp/rules.debug /tmp/rules.debug.old
                                mv /tmp/rules.debug.tmp /tmp/rules.debug

                                pfctl -o basic -f /tmp/rules.debug > errorOUT.txt 2>&1

                                rm /tmp/rules.debug.tmp

                                #Insert countryblock rules
                                a="0"
                                echo $a
                                while read line
                                do a=$(($a+1));
                                echo $a;
                                if [ "$a" = "$i" ]; then
                                echo "" >> /tmp/rules.debug.tmp
                                echo "#countryblock" >> /tmp/rules.debug.tmp
                                echo "table <countryblock>persist file '/usr/local/www/packages/countryblock/lists/countries.txt'" >> /tmp/rules.debug.tmp
                                echo "table <countryblockw>persist file '/usr/local/www/packages/countryblock/countries-white.txt'" >> /tmp/rules.debug.tmp

                                	for i in $(cat /usr/local/www/packages/countryblock/interfaces.txt); do
                                		echo "pass quick from <countryblockw>to $i label 'countryblock'" >> /tmp/rules.debug.tmp
                                		echo "pass quick from $i to <countryblockw>label 'countryblock'" >> /tmp/rules.debug.tmp
                                		if [ -f logging ]; then
                                			echo "block log quick from <countryblock>to $i label 'countryblock'" >> /tmp/rules.debug.tmp
                                		else
                                			echo "block quick from <countryblock>to $i label 'countryblock'" >> /tmp/rules.debug.tmp
                                		fi
                                		if [ -f OUTBOUND ]; then
                                			echo "block quick from $i to <countryblock>label 'countryblock'" >> /tmp/rules.debug.tmp
                                		fi
                                	done
                                fi
                                echo $line >> /tmp/rules.debug.tmp
                                

                                done < "/tmp/rules.debug"

                                mv /tmp/rules.debug /tmp/rules.debug.old
                                mv /tmp/rules.debug.tmp /tmp/rules.debug

                                rm errorOUT.txt
                                pfctl -o basic -f /tmp/rules.debug > /usr/local/www/packages/countryblock/errorOUT.txt 2>&179
                                10
                                0
                                1
                                2
                                3
                                4
                                5
                                6
                                7
                                8
                                9
                                10
                                11
                                12
                                13
                                14
                                15
                                16
                                17
                                18
                                19
                                20
                                21
                                22
                                23
                                24
                                25
                                26
                                27
                                28
                                29
                                30
                                31
                                32
                                33
                                34
                                35
                                36
                                37
                                38
                                39
                                40
                                41
                                42
                                43
                                44
                                45
                                46
                                47
                                48
                                49
                                50
                                51
                                52
                                53
                                54
                                55
                                56
                                57
                                58
                                59
                                60
                                61
                                62
                                63
                                64
                                65
                                66
                                67
                                68
                                69
                                70
                                71
                                72
                                73
                                74
                                75
                                76
                                77
                                78
                                79
                                80
                                81
                                82
                                83
                                84
                                85
                                86
                                87
                                88
                                89
                                90
                                91
                                92
                                93
                                94
                                95
                                96
                                97
                                98
                                99
                                100
                                101
                                102
                                103
                                104
                                105
                                106
                                107
                                108
                                109
                                110
                                111
                                112
                                113
                                114
                                115
                                116
                                117
                                118
                                119
                                120
                                121
                                122
                                123
                                124
                                125
                                126
                                127
                                128
                                129
                                130
                                131
                                132
                                133
                                134
                                135
                                136
                                137
                                138
                                139
                                140
                                141
                                142
                                143
                                144
                                145
                                146
                                147
                                148
                                149
                                150
                                151
                                152
                                153
                                154
                                155
                                156
                                157
                                158
                                159
                                160
                                161
                                162
                                163
                                164
                                165
                                166
                                167
                                168
                                169
                                170
                                171
                                172
                                173
                                174
                                175
                                176
                                177
                                178
                                179
                                180
                                181
                                182
                                183
                                184
                                185
                                186
                                187
                                188
                                189
                                190
                                191
                                192
                                193
                                194
                                195
                                196
                                197
                                198
                                199
                                200
                                201
                                202
                                203
                                204
                                205
                                206
                                207
                                208
                                209</countryblock></countryblock></countryblock></countryblockw></countryblockw></countryblockw></countryblock></snort2c></snort2c>

                                
                                I've left the empty lines in.
                                
                                If I start Country Block via ticking the box on the WebIF and then run the script, it correctly returns```
                                $ /usr/local/etc/rc.d/countryblock.sh
                                running
                                
                                

                                This is all happening on 1.2.3 nanobsd using firefox.

                                1 Reply Last reply Reply Quote 0
                                • M
                                  mst
                                  last edited by

                                  looks like I have the same problem as rajkedda had:

                                  [2.0-BETA5][root@pfsense.home]/usr/local/etc/rc.d(4): ./countryblock.sh
                                  not running
                                  root: Countryblock was found not running
                                  pfctl: Table does not exist.
                                  Content-type: text/html

                                  Message sent! - Go Back0 table deleted.
                                  94
                                  19
                                  rm: /tmp/rules.debug.tmp: No such file or directory
                                  rm: /tmp/rules.debug.tmp: No such file or directory
                                  0
                                  1
                                  2
                                  3

                                  1 Reply Last reply Reply Quote 0
                                  • J
                                    JackANSI
                                    last edited by

                                    @tommyboy180:

                                    @JackANSI:

                                    When you check "Enable Logging?" in the settings page, where is it being logged to?

                                    The firewall tab under system logs.

                                    Thought so.  Then:
                                    A. I'm getting no traffic at all from any of the top spammers,
                                    B. Country Block isn't running even though it says "Running…. Blocking 11110 Networks",
                                    C. Logging isn't working right for me somehow, or
                                    D. The only traffic I have heading my way is being handled by the 28 rules I have on my TWAN interface already.

                                    Are the country block rules before or after any rules we already have under the regular firewall rules?  Because a few of the ranges I excluded manually a long time ago show entries in the firewall log every 5-10 minutes.

                                    Might this be related to my config and country block isn't compatible with it?  I'm running 1.2.3,  I have 2 WANs, one T1 and one cable modem.  The T1 is where I want country block (and it is selected alone under "interfaces") as it is where the servers reside.  The T1 also has 5 IP addresses assigned statically.  The cable modem handles all the client/user traffic and is the 'real' WAN port.  There are also 6 other interfaces on this machine.

                                    In my config file I have the following being applied to that interface (the only way I could get this interface working right):

                                    <shellcmd>/sbin/ifconfig fxp2 #.#.#.203 netmask 255.255.255.255 alias</shellcmd>
                                    <shellcmd>/sbin/ifconfig fxp2 #.#.#.204 netmask 255.255.255.255 alias</shellcmd>
                                    <shellcmd>/sbin/ifconfig fxp2 #.#.#.205 netmask 255.255.255.255 alias</shellcmd>
                                    <shellcmd>/sbin/ifconfig fxp2 #.#.#.206 netmask 255.255.255.255 alias</shellcmd>
                                    .....
                                    <opt2><if>fxp2</if>
                                    <descr>TWAN</descr>
                                    <bridge><ipaddr>#.#.#.202</ipaddr>
                                    <subnet>29</subnet>
                                    <gateway>#.#.#.201</gateway>
                                    <spoofmac><mtu><enable></enable></mtu></spoofmac></bridge></opt2>

                                    I'm working on a little script that will just take the content of the files from countryipblocks.net and just creates something I can paste directly into the config.xml so I can be sure what I want blocked is blocked anyway.  But I'm willing to keep trying on CB until it works.

                                    1 Reply Last reply Reply Quote 0
                                    • T
                                      tommyboy180
                                      last edited by

                                      @JackANSI:

                                      @tommyboy180:

                                      @JackANSI:

                                      When you check "Enable Logging?" in the settings page, where is it being logged to?

                                      The firewall tab under system logs.

                                      Thought so.  Then:
                                      A. I'm getting no traffic at all from any of the top spammers,
                                      B. Country Block isn't running even though it says "Running…. Blocking 11110 Networks",
                                      C. Logging isn't working right for me somehow, or
                                      D. The only traffic I have heading my way is being handled by the 28 rules I have on my TWAN interface already.

                                      Are the country block rules before or after any rules we already have under the regular firewall rules?  Because a few of the ranges I excluded manually a long time ago show entries in the firewall log every 5-10 minutes.

                                      Might this be related to my config and country block isn't compatible with it?  I'm running 1.2.3,  I have 2 WANs, one T1 and one cable modem.  The T1 is where I want country block (and it is selected alone under "interfaces") as it is where the servers reside.  The T1 also has 5 IP addresses assigned statically.  The cable modem handles all the client/user traffic and is the 'real' WAN port.  There are also 6 other interfaces on this machine.

                                      In my config file I have the following being applied to that interface (the only way I could get this interface working right):

                                      <shellcmd>/sbin/ifconfig fxp2 #.#.#.203 netmask 255.255.255.255 alias</shellcmd>
                                      <shellcmd>/sbin/ifconfig fxp2 #.#.#.204 netmask 255.255.255.255 alias</shellcmd>
                                      <shellcmd>/sbin/ifconfig fxp2 #.#.#.205 netmask 255.255.255.255 alias</shellcmd>
                                      <shellcmd>/sbin/ifconfig fxp2 #.#.#.206 netmask 255.255.255.255 alias</shellcmd>
                                      .....
                                      <opt2><if>fxp2</if>
                                      <descr>TWAN</descr>
                                      <bridge><ipaddr>#.#.#.202</ipaddr>
                                      <subnet>29</subnet>
                                      <gateway>#.#.#.201</gateway>
                                      <spoofmac><mtu><enable></enable></mtu></spoofmac></bridge></opt2>

                                      I'm working on a little script that will just take the content of the files from countryipblocks.net and just creates something I can paste directly into the config.xml so I can be sure what I want blocked is blocked anyway.  But I'm willing to keep trying on CB until it works.

                                      Check block outbound.
                                      Re-save/update countryblock so the rules are re-applied.
                                      Ping a country that is blocked (check the country txt file if your unsure of any ip ranges)
                                      It should show in the firewall logs and you should get an error that says "operation not permitted" meaning it's working!

                                      -Tom Schaefer
                                      SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                      Please support pfBlocker | File Browser | Strikeback

                                      1 Reply Last reply Reply Quote 0
                                      • T
                                        tommyboy180
                                        last edited by

                                        @ghm:

                                        @tommyboy180:

                                        The cron script checks to see if countryblock is running. If it is then it will exit and if countryblock is not running then it will attempt to start the package. It's fine.

                                        I've now executed the command manually - and the status page now shows:```
                                        Current Status = NOT running
                                        /tmp/rules.debug:79: cannot load "/usr/local/www/packages/countryblock/lists/countries.txt": No such file or directory
                                        You are blocking 0 Networks

                                        
                                        Again, if I start CountryBlock manually via the WebIF its runs until the next PPPOE restart.
                                        But the command /usr/local/etc/rc.d/countryblock.sh does not restart it.
                                        In fact I get this if I execute it manually (yes, it echoes "not running" and then the contents is printed,,,):
                                        

                                        $ /usr/local/etc/rc.d/countryblock.sh
                                        not running
                                        Content-type: text/html

                                        #version 2.0
                                        #check if countryblock running
                                        export resultr=pfctl -s rules | grep -c countryblock
                                        #echo $resultr
                                        if [ "$resultr" -gt "0" ]; then
                                        echo running
                                        exit 1
                                        else
                                        echo not running
                                        /usr/bin/logger -s "Countryblock was found not running"
                                        echo "Countryblock not running" | /usr/local/bin/php /usr/local/www/packages/countryblock/email_send.php
                                        fi

                                        pfctl -t countryblock -T kill
                                        sed -i -e '/countryblock/d' /tmp/rules.debug

                                        #Now edit /tmp/rules.debug

                                        #find my line for table
                                        export i=grep -n 'block quick from any to <snort2c>' /tmp/rules.debug | grep -o '[0-9]\{2,4\}'
                                        export t=grep -n 'User Aliases' /tmp/rules.debug |grep -o '[0-9]\{1,2\}'

                                        i=$(($i+'1'))
                                        t=$(($t+'1'))
                                        #i = line where <snort2c>is
                                        #t is where 'User Aliases' is
                                        echo $i
                                        echo $t

                                        rm /tmp/rules.debug.tmp

                                        #Insert table-entry limit
                                        sed -i -e '/900000/d' /tmp/rules.debug
                                        while read line
                                        do a=$(($a+1));
                                        #echo $a;
                                        if [ "$a" = "$t" ]; then
                                        echo "" >> /tmp/rules.debug.tmp
                                        echo "set limit table-entries 900000" >> /tmp/rules.debug.tmp
                                        fi
                                        echo $line >> /tmp/rules.debug.tmp
                                        done < "/tmp/rules.debug"

                                        mv /tmp/rules.debug /tmp/rules.debug.old
                                        mv /tmp/rules.debug.tmp /tmp/rules.debug

                                        pfctl -o basic -f /tmp/rules.debug > errorOUT.txt 2>&1

                                        rm /tmp/rules.debug.tmp

                                        #Insert countryblock rules
                                        a="0"
                                        echo $a
                                        while read line
                                        do a=$(($a+1));
                                        echo $a;
                                        if [ "$a" = "$i" ]; then
                                        echo "" >> /tmp/rules.debug.tmp
                                        echo "#countryblock" >> /tmp/rules.debug.tmp
                                        echo "table <countryblock>persist file '/usr/local/www/packages/countryblock/lists/countries.txt'" >> /tmp/rules.debug.tmp
                                        echo "table <countryblockw>persist file '/usr/local/www/packages/countryblock/countries-white.txt'" >> /tmp/rules.debug.tmp

                                          for i in $(cat /usr/local/www/packages/countryblock/interfaces.txt); do
                                          	echo "pass quick from <countryblockw>to $i label 'countryblock'" >> /tmp/rules.debug.tmp
                                          	echo "pass quick from $i to <countryblockw>label 'countryblock'" >> /tmp/rules.debug.tmp
                                          	if [ -f logging ]; then
                                          		echo "block log quick from <countryblock>to $i label 'countryblock'" >> /tmp/rules.debug.tmp
                                          	else
                                          		echo "block quick from <countryblock>to $i label 'countryblock'" >> /tmp/rules.debug.tmp
                                          	fi
                                          	if [ -f OUTBOUND ]; then
                                          		echo "block quick from $i to <countryblock>label 'countryblock'" >> /tmp/rules.debug.tmp
                                          	fi
                                          done
                                        

                                        fi
                                        echo $line >> /tmp/rules.debug.tmp
                                        done < "/tmp/rules.debug"

                                        mv /tmp/rules.debug /tmp/rules.debug.old
                                        mv /tmp/rules.debug.tmp /tmp/rules.debug

                                        rm errorOUT.txt
                                        pfctl -o basic -f /tmp/rules.debug > /usr/local/www/packages/countryblock/errorOUT.txt 2>&179
                                        10
                                        0
                                        1
                                        2
                                        3
                                        4
                                        5
                                        6
                                        7
                                        8
                                        9
                                        10
                                        11
                                        12
                                        13
                                        14
                                        15
                                        16
                                        17
                                        18
                                        19
                                        20
                                        21
                                        22
                                        23
                                        24
                                        25
                                        26
                                        27
                                        28
                                        29
                                        30
                                        31
                                        32
                                        33
                                        34
                                        35
                                        36
                                        37
                                        38
                                        39
                                        40
                                        41
                                        42
                                        43
                                        44
                                        45
                                        46
                                        47
                                        48
                                        49
                                        50
                                        51
                                        52
                                        53
                                        54
                                        55
                                        56
                                        57
                                        58
                                        59
                                        60
                                        61
                                        62
                                        63
                                        64
                                        65
                                        66
                                        67
                                        68
                                        69
                                        70
                                        71
                                        72
                                        73
                                        74
                                        75
                                        76
                                        77
                                        78
                                        79
                                        80
                                        81
                                        82
                                        83
                                        84
                                        85
                                        86
                                        87
                                        88
                                        89
                                        90
                                        91
                                        92
                                        93
                                        94
                                        95
                                        96
                                        97
                                        98
                                        99
                                        100
                                        101
                                        102
                                        103
                                        104
                                        105
                                        106
                                        107
                                        108
                                        109
                                        110
                                        111
                                        112
                                        113
                                        114
                                        115
                                        116
                                        117
                                        118
                                        119
                                        120
                                        121
                                        122
                                        123
                                        124
                                        125
                                        126
                                        127
                                        128
                                        129
                                        130
                                        131
                                        132
                                        133
                                        134
                                        135
                                        136
                                        137
                                        138
                                        139
                                        140
                                        141
                                        142
                                        143
                                        144
                                        145
                                        146
                                        147
                                        148
                                        149
                                        150
                                        151
                                        152
                                        153
                                        154
                                        155
                                        156
                                        157
                                        158
                                        159
                                        160
                                        161
                                        162
                                        163
                                        164
                                        165
                                        166
                                        167
                                        168
                                        169
                                        170
                                        171
                                        172
                                        173
                                        174
                                        175
                                        176
                                        177
                                        178
                                        179
                                        180
                                        181
                                        182
                                        183
                                        184
                                        185
                                        186
                                        187
                                        188
                                        189
                                        190
                                        191
                                        192
                                        193
                                        194
                                        195
                                        196
                                        197
                                        198
                                        199
                                        200
                                        201
                                        202
                                        203
                                        204
                                        205
                                        206
                                        207
                                        208
                                        209</countryblock></countryblock></countryblock></countryblockw></countryblockw></countryblockw></countryblock></snort2c></snort2c>

                                        
                                        I've left the empty lines in.
                                        
                                        If I start Country Block via ticking the box on the WebIF and then run the script, it correctly returns```
                                        $ /usr/local/etc/rc.d/countryblock.sh
                                        running
                                        
                                        

                                        This is all happening on 1.2.3 nanobsd using firefox.

                                        I'm having problems getting embedded running for a test VM. At this time I cannot troubleshoot embedded images. If you can help out and find out where the problem is. Hopefully I will get embedded running soon!

                                        -Tom Schaefer
                                        SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                        Please support pfBlocker | File Browser | Strikeback

                                        1 Reply Last reply Reply Quote 0
                                        • J
                                          JackANSI
                                          last edited by

                                          @tommyboy180:

                                          Check block outbound.
                                          Re-save/update countryblock so the rules are re-applied.
                                          Ping a country that is blocked (check the country txt file if your unsure of any ip ranges)
                                          It should show in the firewall logs and you should get an error that says "operation not permitted" meaning it's working!

                                          Even gave it a reboot.  I'm not getting anything at all on a traceroute to 3 different hosts (I picked ones that are already in my log) so I'm pretty sure its blocking, but nothing in my logs yet.

                                          1 Reply Last reply Reply Quote 0
                                          • T
                                            tommyboy180
                                            last edited by

                                            @JackANSI:

                                            @tommyboy180:

                                            Check block outbound.
                                            Re-save/update countryblock so the rules are re-applied.
                                            Ping a country that is blocked (check the country txt file if your unsure of any ip ranges)
                                            It should show in the firewall logs and you should get an error that says "operation not permitted" meaning it's working!

                                            Even gave it a reboot.  I'm not getting anything at all on a traceroute to 3 different hosts (I picked ones that are already in my log) so I'm pretty sure its blocking, but nothing in my logs yet.

                                            I just did those options and I found countryblock logs within the firewall logs.
                                            The attached screenshot is from just now.
                                            Edit: if the webGUI says it's running then it's running. There's no way it can be a false positive since it actually checks to make sure the countryblock tables are in pfctl.

                                            Edit2: It only logs attempt coming inbound. If you try to ping out then it's not logged. Sorry for that confusion.

                                            block.jpg
                                            block.jpg_thumb

                                            -Tom Schaefer
                                            SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                            Please support pfBlocker | File Browser | Strikeback

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.