Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Country Block

    Scheduled Pinned Locked Moved pfSense Packages
    691 Posts 79 Posters 682.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      Supermule Banned
      last edited by

      My cronjob is not working either…...it starts the package every minute.

      Not running is the current status and the Cron doesnt start it.

      1 Reply Last reply Reply Quote 0
      • M
        mst
        last edited by

        After I go into the topic more deeply, I have found that Country Block is running. Problem was with crone ( */5 ) => (0) fixed the problem.

        Also:

        ![country block.JPG](/public/imported_attachments/1/country block.JPG)
        ![country block.JPG_thumb](/public/imported_attachments/1/country block.JPG_thumb)

        1 Reply Last reply Reply Quote 0
        • S
          Supermule Banned
          last edited by

          But then it runs all the time….

          Not optimal...

          @mst:

          After I go into the topic more deeply, I have found that Country Block is running. Problem was with crone ( */5 ) => (0) fixed the problem.

          Also:

          1 Reply Last reply Reply Quote 0
          • T
            tommyboy180
            last edited by

            @Supermule:

            But then it runs all the time….

            Not optimal...

            @mst:

            After I go into the topic more deeply, I have found that Country Block is running. Problem was with crone ( */5 ) => (0) fixed the problem.

            Also:

            The cron script checks to see if countryblock is running. If it is then it will exit and if countryblock is not running then it will attempt to start the package. It's fine.

            -Tom Schaefer
            SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

            Please support pfBlocker | File Browser | Strikeback

            1 Reply Last reply Reply Quote 0
            • G
              ghm
              last edited by

              @tommyboy180:

              The cron script checks to see if countryblock is running. If it is then it will exit and if countryblock is not running then it will attempt to start the package. It's fine.

              …still only get```
              root: Countryblock was found not running

              1 Reply Last reply Reply Quote 0
              • M
                mst
                last edited by

                sorry false alarm….. I was too happy ....

                after almost one day of working get this again:

                Current Status = NOT running
                no IP address found for __csrf_magic

                I used firefox ....

                1 Reply Last reply Reply Quote 0
                • G
                  ghm
                  last edited by

                  @tommyboy180:

                  The cron script checks to see if countryblock is running. If it is then it will exit and if countryblock is not running then it will attempt to start the package. It's fine.

                  I've now executed the command manually - and the status page now shows:```
                  Current Status = NOT running
                  /tmp/rules.debug:79: cannot load "/usr/local/www/packages/countryblock/lists/countries.txt": No such file or directory
                  You are blocking 0 Networks

                  
                  Again, if I start CountryBlock manually via the WebIF its runs until the next PPPOE restart.
                  But the command /usr/local/etc/rc.d/countryblock.sh does not restart it.
                  In fact I get this if I execute it manually (yes, it echoes "not running" and then the contents is printed,,,):
                  

                  $ /usr/local/etc/rc.d/countryblock.sh
                  not running
                  Content-type: text/html

                  #version 2.0
                  #check if countryblock running
                  export resultr=pfctl -s rules | grep -c countryblock
                  #echo $resultr
                  if [ "$resultr" -gt "0" ]; then
                  echo running
                  exit 1
                  else
                  echo not running
                  /usr/bin/logger -s "Countryblock was found not running"
                  echo "Countryblock not running" | /usr/local/bin/php /usr/local/www/packages/countryblock/email_send.php
                  fi

                  pfctl -t countryblock -T kill
                  sed -i -e '/countryblock/d' /tmp/rules.debug

                  #Now edit /tmp/rules.debug

                  #find my line for table
                  export i=grep -n 'block quick from any to <snort2c>' /tmp/rules.debug | grep -o '[0-9]\{2,4\}'
                  export t=grep -n 'User Aliases' /tmp/rules.debug |grep -o '[0-9]\{1,2\}'

                  i=$(($i+'1'))
                  t=$(($t+'1'))
                  #i = line where <snort2c>is
                  #t is where 'User Aliases' is
                  echo $i
                  echo $t

                  rm /tmp/rules.debug.tmp

                  #Insert table-entry limit
                  sed -i -e '/900000/d' /tmp/rules.debug
                  while read line
                  do a=$(($a+1));
                  #echo $a;
                  if [ "$a" = "$t" ]; then
                  echo "" >> /tmp/rules.debug.tmp
                  echo "set limit table-entries 900000" >> /tmp/rules.debug.tmp
                  fi
                  echo $line >> /tmp/rules.debug.tmp
                  done < "/tmp/rules.debug"

                  mv /tmp/rules.debug /tmp/rules.debug.old
                  mv /tmp/rules.debug.tmp /tmp/rules.debug

                  pfctl -o basic -f /tmp/rules.debug > errorOUT.txt 2>&1

                  rm /tmp/rules.debug.tmp

                  #Insert countryblock rules
                  a="0"
                  echo $a
                  while read line
                  do a=$(($a+1));
                  echo $a;
                  if [ "$a" = "$i" ]; then
                  echo "" >> /tmp/rules.debug.tmp
                  echo "#countryblock" >> /tmp/rules.debug.tmp
                  echo "table <countryblock>persist file '/usr/local/www/packages/countryblock/lists/countries.txt'" >> /tmp/rules.debug.tmp
                  echo "table <countryblockw>persist file '/usr/local/www/packages/countryblock/countries-white.txt'" >> /tmp/rules.debug.tmp

                  	for i in $(cat /usr/local/www/packages/countryblock/interfaces.txt); do
                  		echo "pass quick from <countryblockw>to $i label 'countryblock'" >> /tmp/rules.debug.tmp
                  		echo "pass quick from $i to <countryblockw>label 'countryblock'" >> /tmp/rules.debug.tmp
                  		if [ -f logging ]; then
                  			echo "block log quick from <countryblock>to $i label 'countryblock'" >> /tmp/rules.debug.tmp
                  		else
                  			echo "block quick from <countryblock>to $i label 'countryblock'" >> /tmp/rules.debug.tmp
                  		fi
                  		if [ -f OUTBOUND ]; then
                  			echo "block quick from $i to <countryblock>label 'countryblock'" >> /tmp/rules.debug.tmp
                  		fi
                  	done
                  fi
                  echo $line >> /tmp/rules.debug.tmp
                  

                  done < "/tmp/rules.debug"

                  mv /tmp/rules.debug /tmp/rules.debug.old
                  mv /tmp/rules.debug.tmp /tmp/rules.debug

                  rm errorOUT.txt
                  pfctl -o basic -f /tmp/rules.debug > /usr/local/www/packages/countryblock/errorOUT.txt 2>&179
                  10
                  0
                  1
                  2
                  3
                  4
                  5
                  6
                  7
                  8
                  9
                  10
                  11
                  12
                  13
                  14
                  15
                  16
                  17
                  18
                  19
                  20
                  21
                  22
                  23
                  24
                  25
                  26
                  27
                  28
                  29
                  30
                  31
                  32
                  33
                  34
                  35
                  36
                  37
                  38
                  39
                  40
                  41
                  42
                  43
                  44
                  45
                  46
                  47
                  48
                  49
                  50
                  51
                  52
                  53
                  54
                  55
                  56
                  57
                  58
                  59
                  60
                  61
                  62
                  63
                  64
                  65
                  66
                  67
                  68
                  69
                  70
                  71
                  72
                  73
                  74
                  75
                  76
                  77
                  78
                  79
                  80
                  81
                  82
                  83
                  84
                  85
                  86
                  87
                  88
                  89
                  90
                  91
                  92
                  93
                  94
                  95
                  96
                  97
                  98
                  99
                  100
                  101
                  102
                  103
                  104
                  105
                  106
                  107
                  108
                  109
                  110
                  111
                  112
                  113
                  114
                  115
                  116
                  117
                  118
                  119
                  120
                  121
                  122
                  123
                  124
                  125
                  126
                  127
                  128
                  129
                  130
                  131
                  132
                  133
                  134
                  135
                  136
                  137
                  138
                  139
                  140
                  141
                  142
                  143
                  144
                  145
                  146
                  147
                  148
                  149
                  150
                  151
                  152
                  153
                  154
                  155
                  156
                  157
                  158
                  159
                  160
                  161
                  162
                  163
                  164
                  165
                  166
                  167
                  168
                  169
                  170
                  171
                  172
                  173
                  174
                  175
                  176
                  177
                  178
                  179
                  180
                  181
                  182
                  183
                  184
                  185
                  186
                  187
                  188
                  189
                  190
                  191
                  192
                  193
                  194
                  195
                  196
                  197
                  198
                  199
                  200
                  201
                  202
                  203
                  204
                  205
                  206
                  207
                  208
                  209</countryblock></countryblock></countryblock></countryblockw></countryblockw></countryblockw></countryblock></snort2c></snort2c>

                  
                  I've left the empty lines in.
                  
                  If I start Country Block via ticking the box on the WebIF and then run the script, it correctly returns```
                  $ /usr/local/etc/rc.d/countryblock.sh
                  running
                  
                  

                  This is all happening on 1.2.3 nanobsd using firefox.

                  1 Reply Last reply Reply Quote 0
                  • M
                    mst
                    last edited by

                    looks like I have the same problem as rajkedda had:

                    [2.0-BETA5][root@pfsense.home]/usr/local/etc/rc.d(4): ./countryblock.sh
                    not running
                    root: Countryblock was found not running
                    pfctl: Table does not exist.
                    Content-type: text/html

                    Message sent! - Go Back0 table deleted.
                    94
                    19
                    rm: /tmp/rules.debug.tmp: No such file or directory
                    rm: /tmp/rules.debug.tmp: No such file or directory
                    0
                    1
                    2
                    3

                    1 Reply Last reply Reply Quote 0
                    • J
                      JackANSI
                      last edited by

                      @tommyboy180:

                      @JackANSI:

                      When you check "Enable Logging?" in the settings page, where is it being logged to?

                      The firewall tab under system logs.

                      Thought so.  Then:
                      A. I'm getting no traffic at all from any of the top spammers,
                      B. Country Block isn't running even though it says "Running…. Blocking 11110 Networks",
                      C. Logging isn't working right for me somehow, or
                      D. The only traffic I have heading my way is being handled by the 28 rules I have on my TWAN interface already.

                      Are the country block rules before or after any rules we already have under the regular firewall rules?  Because a few of the ranges I excluded manually a long time ago show entries in the firewall log every 5-10 minutes.

                      Might this be related to my config and country block isn't compatible with it?  I'm running 1.2.3,  I have 2 WANs, one T1 and one cable modem.  The T1 is where I want country block (and it is selected alone under "interfaces") as it is where the servers reside.  The T1 also has 5 IP addresses assigned statically.  The cable modem handles all the client/user traffic and is the 'real' WAN port.  There are also 6 other interfaces on this machine.

                      In my config file I have the following being applied to that interface (the only way I could get this interface working right):

                      <shellcmd>/sbin/ifconfig fxp2 #.#.#.203 netmask 255.255.255.255 alias</shellcmd>
                      <shellcmd>/sbin/ifconfig fxp2 #.#.#.204 netmask 255.255.255.255 alias</shellcmd>
                      <shellcmd>/sbin/ifconfig fxp2 #.#.#.205 netmask 255.255.255.255 alias</shellcmd>
                      <shellcmd>/sbin/ifconfig fxp2 #.#.#.206 netmask 255.255.255.255 alias</shellcmd>
                      .....
                      <opt2><if>fxp2</if>
                      <descr>TWAN</descr>
                      <bridge><ipaddr>#.#.#.202</ipaddr>
                      <subnet>29</subnet>
                      <gateway>#.#.#.201</gateway>
                      <spoofmac><mtu><enable></enable></mtu></spoofmac></bridge></opt2>

                      I'm working on a little script that will just take the content of the files from countryipblocks.net and just creates something I can paste directly into the config.xml so I can be sure what I want blocked is blocked anyway.  But I'm willing to keep trying on CB until it works.

                      1 Reply Last reply Reply Quote 0
                      • T
                        tommyboy180
                        last edited by

                        @JackANSI:

                        @tommyboy180:

                        @JackANSI:

                        When you check "Enable Logging?" in the settings page, where is it being logged to?

                        The firewall tab under system logs.

                        Thought so.  Then:
                        A. I'm getting no traffic at all from any of the top spammers,
                        B. Country Block isn't running even though it says "Running…. Blocking 11110 Networks",
                        C. Logging isn't working right for me somehow, or
                        D. The only traffic I have heading my way is being handled by the 28 rules I have on my TWAN interface already.

                        Are the country block rules before or after any rules we already have under the regular firewall rules?  Because a few of the ranges I excluded manually a long time ago show entries in the firewall log every 5-10 minutes.

                        Might this be related to my config and country block isn't compatible with it?  I'm running 1.2.3,  I have 2 WANs, one T1 and one cable modem.  The T1 is where I want country block (and it is selected alone under "interfaces") as it is where the servers reside.  The T1 also has 5 IP addresses assigned statically.  The cable modem handles all the client/user traffic and is the 'real' WAN port.  There are also 6 other interfaces on this machine.

                        In my config file I have the following being applied to that interface (the only way I could get this interface working right):

                        <shellcmd>/sbin/ifconfig fxp2 #.#.#.203 netmask 255.255.255.255 alias</shellcmd>
                        <shellcmd>/sbin/ifconfig fxp2 #.#.#.204 netmask 255.255.255.255 alias</shellcmd>
                        <shellcmd>/sbin/ifconfig fxp2 #.#.#.205 netmask 255.255.255.255 alias</shellcmd>
                        <shellcmd>/sbin/ifconfig fxp2 #.#.#.206 netmask 255.255.255.255 alias</shellcmd>
                        .....
                        <opt2><if>fxp2</if>
                        <descr>TWAN</descr>
                        <bridge><ipaddr>#.#.#.202</ipaddr>
                        <subnet>29</subnet>
                        <gateway>#.#.#.201</gateway>
                        <spoofmac><mtu><enable></enable></mtu></spoofmac></bridge></opt2>

                        I'm working on a little script that will just take the content of the files from countryipblocks.net and just creates something I can paste directly into the config.xml so I can be sure what I want blocked is blocked anyway.  But I'm willing to keep trying on CB until it works.

                        Check block outbound.
                        Re-save/update countryblock so the rules are re-applied.
                        Ping a country that is blocked (check the country txt file if your unsure of any ip ranges)
                        It should show in the firewall logs and you should get an error that says "operation not permitted" meaning it's working!

                        -Tom Schaefer
                        SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                        Please support pfBlocker | File Browser | Strikeback

                        1 Reply Last reply Reply Quote 0
                        • T
                          tommyboy180
                          last edited by

                          @ghm:

                          @tommyboy180:

                          The cron script checks to see if countryblock is running. If it is then it will exit and if countryblock is not running then it will attempt to start the package. It's fine.

                          I've now executed the command manually - and the status page now shows:```
                          Current Status = NOT running
                          /tmp/rules.debug:79: cannot load "/usr/local/www/packages/countryblock/lists/countries.txt": No such file or directory
                          You are blocking 0 Networks

                          
                          Again, if I start CountryBlock manually via the WebIF its runs until the next PPPOE restart.
                          But the command /usr/local/etc/rc.d/countryblock.sh does not restart it.
                          In fact I get this if I execute it manually (yes, it echoes "not running" and then the contents is printed,,,):
                          

                          $ /usr/local/etc/rc.d/countryblock.sh
                          not running
                          Content-type: text/html

                          #version 2.0
                          #check if countryblock running
                          export resultr=pfctl -s rules | grep -c countryblock
                          #echo $resultr
                          if [ "$resultr" -gt "0" ]; then
                          echo running
                          exit 1
                          else
                          echo not running
                          /usr/bin/logger -s "Countryblock was found not running"
                          echo "Countryblock not running" | /usr/local/bin/php /usr/local/www/packages/countryblock/email_send.php
                          fi

                          pfctl -t countryblock -T kill
                          sed -i -e '/countryblock/d' /tmp/rules.debug

                          #Now edit /tmp/rules.debug

                          #find my line for table
                          export i=grep -n 'block quick from any to <snort2c>' /tmp/rules.debug | grep -o '[0-9]\{2,4\}'
                          export t=grep -n 'User Aliases' /tmp/rules.debug |grep -o '[0-9]\{1,2\}'

                          i=$(($i+'1'))
                          t=$(($t+'1'))
                          #i = line where <snort2c>is
                          #t is where 'User Aliases' is
                          echo $i
                          echo $t

                          rm /tmp/rules.debug.tmp

                          #Insert table-entry limit
                          sed -i -e '/900000/d' /tmp/rules.debug
                          while read line
                          do a=$(($a+1));
                          #echo $a;
                          if [ "$a" = "$t" ]; then
                          echo "" >> /tmp/rules.debug.tmp
                          echo "set limit table-entries 900000" >> /tmp/rules.debug.tmp
                          fi
                          echo $line >> /tmp/rules.debug.tmp
                          done < "/tmp/rules.debug"

                          mv /tmp/rules.debug /tmp/rules.debug.old
                          mv /tmp/rules.debug.tmp /tmp/rules.debug

                          pfctl -o basic -f /tmp/rules.debug > errorOUT.txt 2>&1

                          rm /tmp/rules.debug.tmp

                          #Insert countryblock rules
                          a="0"
                          echo $a
                          while read line
                          do a=$(($a+1));
                          echo $a;
                          if [ "$a" = "$i" ]; then
                          echo "" >> /tmp/rules.debug.tmp
                          echo "#countryblock" >> /tmp/rules.debug.tmp
                          echo "table <countryblock>persist file '/usr/local/www/packages/countryblock/lists/countries.txt'" >> /tmp/rules.debug.tmp
                          echo "table <countryblockw>persist file '/usr/local/www/packages/countryblock/countries-white.txt'" >> /tmp/rules.debug.tmp

                            for i in $(cat /usr/local/www/packages/countryblock/interfaces.txt); do
                            	echo "pass quick from <countryblockw>to $i label 'countryblock'" >> /tmp/rules.debug.tmp
                            	echo "pass quick from $i to <countryblockw>label 'countryblock'" >> /tmp/rules.debug.tmp
                            	if [ -f logging ]; then
                            		echo "block log quick from <countryblock>to $i label 'countryblock'" >> /tmp/rules.debug.tmp
                            	else
                            		echo "block quick from <countryblock>to $i label 'countryblock'" >> /tmp/rules.debug.tmp
                            	fi
                            	if [ -f OUTBOUND ]; then
                            		echo "block quick from $i to <countryblock>label 'countryblock'" >> /tmp/rules.debug.tmp
                            	fi
                            done
                          

                          fi
                          echo $line >> /tmp/rules.debug.tmp
                          done < "/tmp/rules.debug"

                          mv /tmp/rules.debug /tmp/rules.debug.old
                          mv /tmp/rules.debug.tmp /tmp/rules.debug

                          rm errorOUT.txt
                          pfctl -o basic -f /tmp/rules.debug > /usr/local/www/packages/countryblock/errorOUT.txt 2>&179
                          10
                          0
                          1
                          2
                          3
                          4
                          5
                          6
                          7
                          8
                          9
                          10
                          11
                          12
                          13
                          14
                          15
                          16
                          17
                          18
                          19
                          20
                          21
                          22
                          23
                          24
                          25
                          26
                          27
                          28
                          29
                          30
                          31
                          32
                          33
                          34
                          35
                          36
                          37
                          38
                          39
                          40
                          41
                          42
                          43
                          44
                          45
                          46
                          47
                          48
                          49
                          50
                          51
                          52
                          53
                          54
                          55
                          56
                          57
                          58
                          59
                          60
                          61
                          62
                          63
                          64
                          65
                          66
                          67
                          68
                          69
                          70
                          71
                          72
                          73
                          74
                          75
                          76
                          77
                          78
                          79
                          80
                          81
                          82
                          83
                          84
                          85
                          86
                          87
                          88
                          89
                          90
                          91
                          92
                          93
                          94
                          95
                          96
                          97
                          98
                          99
                          100
                          101
                          102
                          103
                          104
                          105
                          106
                          107
                          108
                          109
                          110
                          111
                          112
                          113
                          114
                          115
                          116
                          117
                          118
                          119
                          120
                          121
                          122
                          123
                          124
                          125
                          126
                          127
                          128
                          129
                          130
                          131
                          132
                          133
                          134
                          135
                          136
                          137
                          138
                          139
                          140
                          141
                          142
                          143
                          144
                          145
                          146
                          147
                          148
                          149
                          150
                          151
                          152
                          153
                          154
                          155
                          156
                          157
                          158
                          159
                          160
                          161
                          162
                          163
                          164
                          165
                          166
                          167
                          168
                          169
                          170
                          171
                          172
                          173
                          174
                          175
                          176
                          177
                          178
                          179
                          180
                          181
                          182
                          183
                          184
                          185
                          186
                          187
                          188
                          189
                          190
                          191
                          192
                          193
                          194
                          195
                          196
                          197
                          198
                          199
                          200
                          201
                          202
                          203
                          204
                          205
                          206
                          207
                          208
                          209</countryblock></countryblock></countryblock></countryblockw></countryblockw></countryblockw></countryblock></snort2c></snort2c>

                          
                          I've left the empty lines in.
                          
                          If I start Country Block via ticking the box on the WebIF and then run the script, it correctly returns```
                          $ /usr/local/etc/rc.d/countryblock.sh
                          running
                          
                          

                          This is all happening on 1.2.3 nanobsd using firefox.

                          I'm having problems getting embedded running for a test VM. At this time I cannot troubleshoot embedded images. If you can help out and find out where the problem is. Hopefully I will get embedded running soon!

                          -Tom Schaefer
                          SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                          Please support pfBlocker | File Browser | Strikeback

                          1 Reply Last reply Reply Quote 0
                          • J
                            JackANSI
                            last edited by

                            @tommyboy180:

                            Check block outbound.
                            Re-save/update countryblock so the rules are re-applied.
                            Ping a country that is blocked (check the country txt file if your unsure of any ip ranges)
                            It should show in the firewall logs and you should get an error that says "operation not permitted" meaning it's working!

                            Even gave it a reboot.  I'm not getting anything at all on a traceroute to 3 different hosts (I picked ones that are already in my log) so I'm pretty sure its blocking, but nothing in my logs yet.

                            1 Reply Last reply Reply Quote 0
                            • T
                              tommyboy180
                              last edited by

                              @JackANSI:

                              @tommyboy180:

                              Check block outbound.
                              Re-save/update countryblock so the rules are re-applied.
                              Ping a country that is blocked (check the country txt file if your unsure of any ip ranges)
                              It should show in the firewall logs and you should get an error that says "operation not permitted" meaning it's working!

                              Even gave it a reboot.  I'm not getting anything at all on a traceroute to 3 different hosts (I picked ones that are already in my log) so I'm pretty sure its blocking, but nothing in my logs yet.

                              I just did those options and I found countryblock logs within the firewall logs.
                              The attached screenshot is from just now.
                              Edit: if the webGUI says it's running then it's running. There's no way it can be a false positive since it actually checks to make sure the countryblock tables are in pfctl.

                              Edit2: It only logs attempt coming inbound. If you try to ping out then it's not logged. Sorry for that confusion.

                              block.jpg
                              block.jpg_thumb

                              -Tom Schaefer
                              SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                              Please support pfBlocker | File Browser | Strikeback

                              1 Reply Last reply Reply Quote 0
                              • G
                                ghm
                                last edited by

                                @tommyboy180:

                                I'm having problems getting embedded running for a test VM. At this time I cannot troubleshoot embedded images. If you can help out and find out where the problem is. Hopefully I will get embedded running soon!

                                will try but am not entirely clear how. As a first step, I think this message here is key:

                                Current Status = NOT running
                                /tmp/rules.debug:79: cannot load "/usr/local/www/packages/countryblock/lists/countries.txt": No such file or directory
                                You are blocking 0 Networks
                                

                                I see that after having executed the script from the command window. Pretty much what cron would do. WebIF then still says "not running".

                                But I don't have the foggiest idea why I can enable Country Block by checking the box on the WebIF - no errors then and works until PPPOE reset or Firewall rules change - restart script does not work, have to restart using WebIF.

                                1 Reply Last reply Reply Quote 0
                                • S
                                  Supermule Banned
                                  last edited by

                                  Exactly what I see now…. and thats why I asked for the cron command. It doesnt work....

                                  @ghm:

                                  But I don't have the foggiest idea why I can enable Country Block by checking the box on the WebIF - no errors then and works until PPPOE reset or Firewall rules change - restart script does not work, have to restart using WebIF.

                                  1 Reply Last reply Reply Quote 0
                                  • T
                                    tommyboy180
                                    last edited by

                                    @Supermule:

                                    Exactly what I see now…. and thats why I asked for the cron command. It doesnt work....

                                    @ghm:

                                    But I don't have the foggiest idea why I can enable Country Block by checking the box on the WebIF - no errors then and works until PPPOE reset or Firewall rules change - restart script does not work, have to restart using WebIF.

                                    It's because he's using embedded. It works just fine on full installs. I need to get an embedded test system going or have someone help me out. In the mean time embedded installs wont be fully supported.

                                    -Tom Schaefer
                                    SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                    Please support pfBlocker | File Browser | Strikeback

                                    1 Reply Last reply Reply Quote 0
                                    • S
                                      Supermule Banned
                                      last edited by

                                      I am running a full install in VmWare…..

                                      The cronjob doesnt start countryblock....

                                      1 Reply Last reply Reply Quote 0
                                      • T
                                        tommyboy180
                                        last edited by

                                        @Supermule:

                                        I am running a full install in VmWare…..

                                        The cronjob doesnt start countryblock....

                                        I took a look at your PM and the youtube video. I have determined that you have a typo in your command on the cron job.

                                        -Tom Schaefer
                                        SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                        Please support pfBlocker | File Browser | Strikeback

                                        1 Reply Last reply Reply Quote 0
                                        • S
                                          Supermule Banned
                                          last edited by

                                          Thx :)

                                          @tommyboy180:

                                          @Supermule:

                                          I am running a full install in VmWare…..

                                          The cronjob doesnt start countryblock....

                                          I took a look at your PM and the youtube video. I have determined that you have a typo in your command on the cron job.

                                          1 Reply Last reply Reply Quote 0
                                          • J
                                            JackANSI
                                            last edited by

                                            @tommyboy180:

                                            I just did those options and I found countryblock logs within the firewall logs.
                                            The attached screenshot is from just now.
                                            Edit: if the webGUI says it's running then it's running. There's no way it can be a false positive since it actually checks to make sure the countryblock tables are in pfctl.

                                            Edit2: It only logs attempt coming inbound. If you try to ping out then it's not logged. Sorry for that confusion.

                                            Still have not figured out the logging thing, but if I bring up pfTop and switch to the rules view I can see quite a few entries that contain "<countryblock>" and "<countryblockw>" (like "drop inet from <countryblock>to #") that have a byte and packet count >0.

                                            So it is working for sure and I can monitor that directly.</countryblock></countryblockw></countryblock>

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.