IP-Blocklist

tommyboy180

@tommyboy180:

You are a freaking genius! This is exactly what I was looking for! Everyone is going to be so happy once I commit these changes!
Thank you again m4rcu5!

Tom, do you think this change will fix my issue?

It should. The only reason why the package stop working is because the firewall reloaded it's rules, either because of a change you made, reboot, or the system did it.
So what this changes does it when ever there is a firewall reload the package will automatically be reloaded as well.

Therefore you should have no down time and thus eliminating the need for the cron job completely. I'm still testing right now and someone else is testing embedded for me. Hopefully we get positive results.

m4rcu5

@tommyboy180:

You are a freaking genius! This is exactly what I was looking for! Everyone is going to be so happy once I commit these changes!
Thank you again m4rcu5!

Your welcome. I actually wanted to mail it to you a few weeks ago but totally forgot :-( Sorry!

-m4rcu5

Atlanta-Mike

I noticed their were new packages out available a couple of nights ago and re-installed both Country Block and IP-Blocklist, but both still stop running. Do I need to do something different to keep them running (ie, uninstall and then re-install vs just choosing the re-install option)?

tommyboy180

@Atlanta-Mike:

I noticed their were new packages out available a couple of nights ago and re-installed both Country Block and IP-Blocklist, but both still stop running. Do I need to do something different to keep them running (ie, uninstall and then re-install vs just choosing the re-install option)?

To upgrade you need to uninstall and re-install. The re-install option does nothing.

Slab

@tommyboy180:

To upgrade you need to uninstall and re-install. The re-install option does nothing.

Hi Tom …is the fix for the filter reload problem now in the new version? Thanks...

tommyboy180

@Slab:

@tommyboy180:

To upgrade you need to uninstall and re-install. The re-install option does nothing.

Hi Tom …is the fix for the filter reload problem now in the new version? Thanks...

Yes it is.

Atlanta-Mike

Thanks so much. Both Country Block and I-Blocklist are running fine now. Thanks again!!

focalguy

@tommyboy180:

@focalguy:

Thanks Tom,

I understand you are doing this as time permits and you have other things to do. I also understand it is Beta. I was hoping it was just something I was missing and it would be an easy fix.

I'm not really sure if there are any logs I can capture or anything I can do to dig deeper as to why it is not working. If I can be of any help, please let me know. This is a nice package and I appreciate the work you put into it!

You can follow the process by running convert-execute.sh via the command line and watching the stdout. I will update my BETA 2.0 to the latest and check it it works. What other packages do you have installed?

Thanks. I have no other packages installed although I did have the Open-VM Tools installed since this is running in VMWare ESXi 4.1 but since that package is not working right now I removed it. I did remove this package and then install it again to make sure I am on the latest.

This is what I get below: is it having trouble finding perl? Yea, I just checked and /usr/bin/perl doesn't exist.

[2.0-RC1][admin@removedname]/usr/local/www/packages/ipblocklist(5): ./convert-execute.sh
1 table deleted.
1 table deleted.
./convert-execute.sh: /usr/bin/perl: not found
./convert-execute.sh: /usr/bin/perl: not found
./convert-execute.sh: /usr/bin/perl: not found
rm: /usr/local/www/packages/ipblocklist/lists/ipfw.ipfwTEMP: No such file or directory
rm: Wlists/whitelistTEMP: No such file or directory
rm: /tmp/rules.debug.tmp: No such file or directory
rm: /tmp/rules.debug.tmp: No such file or directory
0
1
2
3
4
5
--snip--
.
.
.
142

tommyboy180

@focalguy:

@tommyboy180:

@focalguy:

Thanks Tom,

I understand you are doing this as time permits and you have other things to do. I also understand it is Beta. I was hoping it was just something I was missing and it would be an easy fix.

I'm not really sure if there are any logs I can capture or anything I can do to dig deeper as to why it is not working. If I can be of any help, please let me know. This is a nice package and I appreciate the work you put into it!

You can follow the process by running convert-execute.sh via the command line and watching the stdout. I will update my BETA 2.0 to the latest and check it it works. What other packages do you have installed?

Thanks. I have no other packages installed although I did have the Open-VM Tools installed since this is running in VMWare ESXi 4.1 but since that package is not working right now I removed it. I did remove this package and then install it again to make sure I am on the latest.

This is what I get below: is it having trouble finding perl? Yea, I just checked and /usr/bin/perl doesn't exist.
[2.0-RC1][admin@removedname]/usr/local/www/packages/ipblocklist(5): ./convert-execute.sh
1 table deleted.
1 table deleted.
./convert-execute.sh: /usr/bin/perl: not found
./convert-execute.sh: /usr/bin/perl: not found
./convert-execute.sh: /usr/bin/perl: not found
rm: /usr/local/www/packages/ipblocklist/lists/ipfw.ipfwTEMP: No such file or directory
rm: Wlists/whitelistTEMP: No such file or directory
rm: /tmp/rules.debug.tmp: No such file or directory
rm: /tmp/rules.debug.tmp: No such file or directory
0
1
2
3
4
5
--snip--
.
.
.
142

Perl get's installed with the compatability package in BETA 2.0. It looks like you're missing perl. Try pkg add -r perl.

focalguy

Yes! That did it. For others, it's actually "pkg_add -r perl".

Thank you for the help! Any idea why my system didn't get it?

tommyboy180

@focalguy:

Yes! That did it. For others, it's actually "pkg_add -r perl".

Thank you for the help! Any idea why my system didn't get it?

Not sure. Line 58 of the install script should have done it.
http://redmine.pfsense.org/projects/pfsense-packages/repository/revisions/master/entry/config/ipblocklist/8/ipblocklist.inc

Good question.

Macom2007

I am on the latest snapshot and i am getting this error while trying to start Country Block :

/tmp/rules.debug:189: cannot load "/usr/local/www/packages/ipblocklist/lists/ipfw.ipfw": No such file or directory

I removed the package and installed it again already.

Any suggestions ?

Macom2007

No one ?

tommyboy180

@Macom2007:

No one ?

Is it breaking your package? By that I mean are you blocking anything despite the error?

Macom2007

Except of CountryBlock all is working fine …

tommyboy180

@Macom2007:

Except of CountryBlock all is working fine …

Can you reword that? I don't understand if countryblock is blocking or not.

Macom2007

Coutryblock is not blocking …

tommyboy180

@Macom2007:

Coutryblock is not blocking …

See if you have perl installed. Run "perl -v" at the command line.

Macom2007

Yes, Perl is installed …

tommyboy180

@Macom2007:

Yes, Perl is installed …

Take a look at lines 32-38 in convert-execute.sh. This is where the ipfw.ipfw file is created.
If those commands don't work then the package cannot use the lists that you are using.

One thing you need to verify is that your lists are in fact working. For example do they get download to lists/ and do the file inside lists/ have data?
Another way you can find out what is broken is to step though convert-execute.sh and see what it's hanging on.

I've done so many hours of testing this package on different platforms that I'm very confident it could be a misconfiguration or a list isn't working at it should be. Another thing is that embedded installs are prone to problems with this package.

Let me know, I would be more than happy to do a full in-depth analysis review of your system to see what the issue is.