Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IP-Blocklist

    Scheduled Pinned Locked Moved pfSense Packages
    496 Posts 86 Posters 500.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      tommyboy180
      last edited by

      @Systex:

      @tommyboy180:

      @Systex:

      I'm running an embedded install of 2.0Beta5 and tried to make the changes listed in this thread in order to get it to work. However, I accidentally forgot a semicolon after the first line I added (require_once('config.inc')) and when I went to refresh the IP-Blocklist page I got the following error in the textbox:

      Parse error: syntax error, unexpected T_ECHO in /usr/local/www/packages/ipblocklist/ipblocklist_list.php on line 5

      Since then, I've tried everything I can to get back to a cleanly-installed state: I've undone the edits I made to that file, and I've even uninstalled and reinstalled the IP-Blacklist package, but whatever I do, I now always get that error. How can I get back to a clean slate without completely reinstalling pfsense?

      My best advice is to uninstall the package, check the file system (/usr/local/www/ipblocklist) and delete it, and then reboot. That should help you start from a clean slate.

      Hmm, after uninstalling I looked in /usr/local/www/ and there was no file or directory ipblocklist. I then rebooted, and reinstalled the package. Same exact error as before. The strange thing, is that if I look at the file /usr/local/www/packages/ipblocklist/ipblocklist_list.php, it's the stock, unmodified form (i.e., correct syntax)!? I'm very confused as to what's going on.

      Sorry. The directory is /usr/local/www/packages/ipblocklist/
      Uninstall and check to make sure that it's deleted.
      Try executing the .sh manually in your console if you get the same error again.

      -Tom Schaefer
      SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

      Please support pfBlocker | File Browser | Strikeback

      1 Reply Last reply Reply Quote 0
      • W
        wm408
        last edited by

        Did we ever resolve the IP Blocklist service having this:

        Current Status = NOT running

        You are blocking 0 Networks/IPs

        Even though the "Enable IP-Blocklist" is checked?  It seems to happen after some period of time… haven't figured out how long, usually I check each day and it seems consistent.

        I'm using embedded, don't know if its specific to this. (1.2.3-release)

        1 Reply Last reply Reply Quote 0
        • T
          tommyboy180
          last edited by

          @wm408:

          Did we ever resolve the IP Blocklist service having this:

          Current Status = NOT running

          You are blocking 0 Networks/IPs

          Even though the "Enable IP-Blocklist" is checked?  It seems to happen after some period of time… haven't figured out how long, usually I check each day and it seems consistent.

          I'm using embedded, don't know if its specific to this.

          embedded doesn't like my package for some reason. Let me take some time to get an embedded environment running to get a fix for you here soon. Thanks.

          -Tom Schaefer
          SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

          Please support pfBlocker | File Browser | Strikeback

          1 Reply Last reply Reply Quote 0
          • W
            wm408
            last edited by

            Tommyboy we luv ya man.  ;D

            @tommyboy180:

            @wm408:

            Did we ever resolve the IP Blocklist service having this:

            Current Status = NOT running

            You are blocking 0 Networks/IPs

            Even though the "Enable IP-Blocklist" is checked?  It seems to happen after some period of time… haven't figured out how long, usually I check each day and it seems consistent.

            I'm using embedded, don't know if its specific to this.

            embedded doesn't like my package for some reason. Let me take some time to get an embedded environment running to get a fix for you here soon. Thanks.

            1 Reply Last reply Reply Quote 0
            • T
              tommyboy180
              last edited by

              @wm408:

              Tommyboy we luv ya man.   ;D

              @tommyboy180:

              @wm408:

              Did we ever resolve the IP Blocklist service having this:

              Current Status = NOT running

              You are blocking 0 Networks/IPs

              Even though the "Enable IP-Blocklist" is checked?  It seems to happen after some period of time… haven't figured out how long, usually I check each day and it seems consistent.

              I'm using embedded, don't know if its specific to this.

              embedded doesn't like my package for some reason. Let me take some time to get an embedded environment running to get a fix for you here soon. Thanks.

              I'm having trouble getting an embedded vm running. Is there an easy way to get embedded going within vmware?

              -Tom Schaefer
              SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

              Please support pfBlocker | File Browser | Strikeback

              1 Reply Last reply Reply Quote 0
              • W
                wm408
                last edited by

                Tommyboy, because the embedded is an image file, I use physdiskwrite to slap the .img file onto a flash disk.  I always reference this howto as well:

                http://pfsense.phoenixkv.net///tutorials/wrap_install/wrap_install.htm

                You would probably have to mount the virtual disk made by vmware as a drive on your PC for physdiskwrite to detect it as a drive/partition.  Or something of this nature.  I am assuming you're trying to mount it like you would an ISO image and that won't fly.  Or maybe you're farther ahead than this.  I am not sure.

                @tommyboy180:

                @wm408:

                Tommyboy we luv ya man.   ;D

                @tommyboy180:

                @wm408:

                Did we ever resolve the IP Blocklist service having this:

                Current Status = NOT running

                You are blocking 0 Networks/IPs

                Even though the "Enable IP-Blocklist" is checked?  It seems to happen after some period of time… haven't figured out how long, usually I check each day and it seems consistent.

                I'm using embedded, don't know if its specific to this.

                embedded doesn't like my package for some reason. Let me take some time to get an embedded environment running to get a fix for you here soon. Thanks.

                I'm having trouble getting an embedded vm running. Is there an easy way to get embedded going within vmware?

                1 Reply Last reply Reply Quote 0
                • D
                  djnicofun
                  last edited by

                  Hello,

                  I have install Ip-Blocklist package ver:0.3.1 on my pfsense ver: 1.2.3-RELEASE
                  I have setting more ip list ( http://iblocklist.charlieprice.org/files/bt_spyware.gz , http://iblocklist.charlieprice.org/files/tbg_bogon.gz etc etc.. )

                  All it's OK from the gui interface install and update.

                  The problem it's for automic list update :

                  i have comment out lines 3-14 of this file : /usr/local/etc/rc.d/IP-Blocklist.sh
                  i have do a cron to execute daly  : /usr/local/etc/rc.d/IP-Blocklist.sh

                  The problem is when i execute this batch : /usr/local/etc/rc.d/IP-Blocklist.sh it juste update firewall rules and note my list.

                  This script not downlad all .gz file and not take a list live update.

                  Only this script update all lists : ipblocklist.php
                  And i have add this line to not have memory error : ini_set("memory_limit","128M");

                  Do you have a solution to automatic realy uptade the lists  ?
                  Without solution, i have think to execute the ipblocklist.php with php command line.
                  Excuse my english .

                  Best regards.

                  1 Reply Last reply Reply Quote 0
                  • T
                    tommyboy180
                    last edited by

                    @djnicofun:

                    Hello,

                    I have install Ip-Blocklist package ver:0.3.1 on my pfsense ver: 1.2.3-RELEASE
                    I have setting more ip list ( http://iblocklist.charlieprice.org/files/bt_spyware.gz , http://iblocklist.charlieprice.org/files/tbg_bogon.gz etc etc.. )

                    All it's OK from the gui interface install and update.

                    The problem it's for automic list update :

                    i have comment out lines 3-14 of this file : /usr/local/etc/rc.d/IP-Blocklist.sh
                    i have do a cron to execute daly  : /usr/local/etc/rc.d/IP-Blocklist.sh

                    The problem is when i execute this batch : /usr/local/etc/rc.d/IP-Blocklist.sh it juste update firewall rules and note my list.

                    This script not downlad all .gz file and not take a list live update.

                    Only this script update all lists : ipblocklist.php
                    And i have add this line to not have memory error : ini_set("memory_limit","128M");

                    Do you have a solution to automatic realy uptade the lists  ?
                    Without solution, i have think to execute the ipblocklist.php with php command line.
                    Excuse my english .

                    Best regards.

                    I think you have a couple options. You can invoke the php via command line with or you can put the fetch code into the .sh on your own. The php code downloads the lists since it's easy to use a loop in php, but by all means put the fetch loop into the shell code.

                    The memory error is normal. You can safely ignore it. It only happens when you use large lists. You can cut down the size of your lists, increase your php mem size, or just ignore it. Even with the error the script will still execute properly.

                    -Tom Schaefer
                    SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                    Please support pfBlocker | File Browser | Strikeback

                    1 Reply Last reply Reply Quote 0
                    • D
                      djnicofun
                      last edited by

                      Hello,

                      I have the error: /usr/bin/perl: not found  when you execute : /usr/local/etc/rc.d/IP-Blocklist.sh ( Or Save/update by webGui )

                      i have find a simply solution :

                      ln -s /usr/local/bin/perl /usr/bin/perl

                      Regards.

                      1 Reply Last reply Reply Quote 0
                      • D
                        djnicofun
                        last edited by

                        Hello,

                        Another little bug:

                        If you want downlaod a list file as : http://list.iblocklist.com/?list=rynxmrknfjysesjtjlxy&id=xxxxxxx&pin=xxxxxxxxx does not work !
                        Exemple if you are a http://www.iblocklist.com/ subscriber you have the same url for your block list.

                        Solution:
                        File : /usr/local/www/packages/ipblocklist/ipblocklist.php
                        exec("/usr/bin/fetch -o lists $line"); –-> replace by --> exec("/usr/bin/fetch -o lists "$line"");

                        Best reagards.

                        1 Reply Last reply Reply Quote 0
                        • T
                          tommyboy180
                          last edited by

                          @djnicofun:

                          Hello,

                          Another little bug:

                          If you want downlaod a list file as : http://list.iblocklist.com/?list=rynxmrknfjysesjtjlxy&id=xxxxxxx&pin=xxxxxxxxx does not work !
                          Exemple if you are a http://www.iblocklist.com/ subscriber you have the same url for your block list.

                          Solution:
                          File : /usr/local/www/packages/ipblocklist/ipblocklist.php
                          exec("/usr/bin/fetch -o lists $line"); –-> replace by --> exec("/usr/bin/fetch -o lists "$line"");

                          Best reagards.

                          Awesome! I will update ASAP. As far as the perl location, some people have this problem, most don't. I guess I can add both locations for compatability but that's not ideal. Did you get it working?

                          -Tom Schaefer
                          SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                          Please support pfBlocker | File Browser | Strikeback

                          1 Reply Last reply Reply Quote 0
                          • W
                            wm408
                            last edited by

                            Tommyboy,

                            Is getting the embedded running in a VM a bi$#h?  If it is… Ill loan you a box to test on.  Let me know.

                            1 Reply Last reply Reply Quote 0
                            • T
                              tommyboy180
                              last edited by

                              @wm408:

                              Tommyboy,

                              Is getting the embedded running in a VM a bi$#h?  If it is… Ill loan you a box to test on.  Let me know.

                              I got it running in VMware but it doesn't detect my virtual NICs for some reason. User NoahVail was supposed to send me a laptop for dev but he hasn't.
                              I still have plans for fix the package for embedded users so don't worry.

                              -Tom Schaefer
                              SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                              Please support pfBlocker | File Browser | Strikeback

                              1 Reply Last reply Reply Quote 0
                              • H
                                hawks_nest
                                last edited by

                                Tommyboy, I have been using IP-Blocklist for a few weeks and it works great. BTW, I am also using your file manager and country blocker package. All awesome programs. I have one issue, it appears that the level1 lists block banking sites (for me it is tnx.banking.pcfinancial.ca) as well as meta data retrieval from tMDB.org and theTVDB.com for meta <browser>for my mediabrowser in win7 media center. They all work fine if I turn off IP-Blocklist. I tried to create a whitelist with the ip addresses of these sites but still no luck. Can you please give me a little more detail on how to create a whitelist, the format, and which directory to place it in. Also how to see if it is working.

                                Thanks</browser>

                                1 Reply Last reply Reply Quote 0
                                • T
                                  tommyboy180
                                  last edited by

                                  @hawks_nest:

                                  Tommyboy, I have been using IP-Blocklist for a few weeks and it works great. BTW, I am also using your file manager and country blocker package. All awesome programs. I have one issue, it appears that the level1 lists block banking sites (for me it is tnx.banking.pcfinancial.ca) as well as meta data retrieval from tMDB.org and theTVDB.com for meta <browser>for my mediabrowser in win7 media center. They all work fine if I turn off IP-Blocklist. I tried to create a whitelist with the ip addresses of these sites but still no luck. Can you please give me a little more detail on how to create a whitelist, the format, and which directory to place it in. Also how to see if it is working.

                                  Thanks</browser>

                                  Hey. I had the same problems as well. Keep trying to whitelist that range. Make sure you're using CIDR formatting on the whiltelist range.
                                  Also, don't forget to re-Save/Update after you create your whitelist. The rules need to be regenerated or else your sites will still be blocked.

                                  Let me know how it turns out. Take care.

                                  -Tom Schaefer
                                  SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                  Please support pfBlocker | File Browser | Strikeback

                                  1 Reply Last reply Reply Quote 0
                                  • H
                                    hawks_nest
                                    last edited by

                                    Thanks, I just re-loaded the rules and it is working great. Thanks for this great package. ;D

                                    1 Reply Last reply Reply Quote 0
                                    • S
                                      Slab
                                      last edited by

                                      @wm408:

                                      Did we ever resolve the IP Blocklist service having this:

                                      Current Status = NOT running

                                      You are blocking 0 Networks/IPs

                                      Even though the "Enable IP-Blocklist" is checked?  It seems to happen after some period of time… haven't figured out how long, usually I check each day and it seems consistent.

                                      I'm using embedded, don't know if its specific to this. (1.2.3-release)

                                      Hi …sorry to resurrect this, but it seems that I am having the exact same problem on the non-embedded version of pfSense. I am running 2.0-RC1-i386 (no snapshots/updates applied). I was able to confirm that last night the status showed running, and this morning it shows not running. "Enable IP-Blocklist" is always checked. If I click 'Save' it changes the status to running again. This has happened several times over the course of the last three days (new install), and I haven't determined if there is a fixed time frame when the status changes.

                                      I am running a vanilla install with only the IP-Blocklist and Snort packages added. Thanks...

                                      1 Reply Last reply Reply Quote 0
                                      • T
                                        tommyboy180
                                        last edited by

                                        @Slab:

                                        @wm408:

                                        Did we ever resolve the IP Blocklist service having this:

                                        Current Status = NOT running

                                        You are blocking 0 Networks/IPs

                                        Even though the "Enable IP-Blocklist" is checked?  It seems to happen after some period of time… haven't figured out how long, usually I check each day and it seems consistent.

                                        I'm using embedded, don't know if its specific to this. (1.2.3-release)

                                        Hi …sorry to resurrect this, but it seems that I am having the exact same problem on the non-embedded version of pfSense. I am running 2.0-RC1-i386 (no snapshots/updates applied). I was able to confirm that last night the status showed running, and this morning it shows not running. "Enable IP-Blocklist" is always checked. If I click 'Save' it changes the status to running again. This has happened several times over the course of the last three days (new install), and I haven't determined if there is a fixed time frame when the status changes.

                                        I am running a vanilla install with only the IP-Blocklist and Snort packages added. Thanks...

                                        I'll look into this today hopefully.

                                        -Tom Schaefer
                                        SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                        Please support pfBlocker | File Browser | Strikeback

                                        1 Reply Last reply Reply Quote 0
                                        • S
                                          seggerman
                                          last edited by

                                          Tommyboy, all

                                          it seems as if IPblocklist is working for everybody except for me  :-[ … I currently have two issues:

                                          1. email settings
                                            see: ipblocklist_1.png

                                          I've set all parameters, but when I hit "test" I get the error
                                          [code]Warning: fsockopen(): unable to connect to none://smtp.1und1.de:25 (Unable to find the socket transport "none" - did you forget to enable it when you configured PHP?) in /usr/local/www/packages/ipblocklist/class.smtp.php on line 122 Mailer Error: SMTP Error: Could not connect to SMTP host.

                                          I solved this problem by commenting

                                          //$mail->SMTPSecure = "none";
                                          

                                          in the email_send.php file

                                          1. Interface settings:
                                            I have in the interfaces.txt file "any", so all interfaces should be activated. Looking at the interfaces tab I get:
                                            see: ipblocklist_if.png

                                          strangely only the LAN interface is available. Going into the ipblocklist_if.php file I modified a few lines of code

                                                             $portinfo): ?>
                                          $comma_array=implode(",",$iface);
                                          echo "$portname - $comma_array 
                                          ";
                                          ?>
                                          
                                          

                                          so that I can see exactly the $iface definitions and I get:
                                          see: ipblocklist_if_new.png

                                          the checking of the interface goes against the physical interface address, instead of pppoe0
                                          The question is if the blocking of the IP-addresses still occur even if the interface tab is "messed up".

                                          I'm currently running on Current version: 2.0-RC1 - Built On: Sat Mar 12 01:18:33 EST 2011

                                          Hope someone can help me out.

                                          Cheers + Regards

                                          Alexander

                                          ipblocklist_if_new.png_thumb
                                          ipblocklist_if_new.png
                                          ipblocklist_if.png_thumb
                                          ipblocklist_if.png
                                          ipblocklist_1.png_thumb
                                          ipblocklist_1.png

                                          1 Reply Last reply Reply Quote 0
                                          • T
                                            tommyboy180
                                            last edited by

                                            seggerman,

                                            Hopefully I can get into it more. Right now I don't have a 2.0 RC1 install. I'm working on getting mine going. Soon I will be able to fully support your issue.

                                            EDIT:

                                            I just got 2.0RC1 running. 2.0-RC1 (i386) built on Tue Mar 15 08:53:58 EDT 2011.

                                            I installed the package and everything is good. I would try re-moving the package and re-installing. See if that helps.

                                            -Tom Schaefer
                                            SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                            Please support pfBlocker | File Browser | Strikeback

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.