Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IP-Blocklist

    Scheduled Pinned Locked Moved pfSense Packages
    496 Posts 86 Posters 500.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      tommyboy180
      last edited by

      @Slab:

      @tommyboy180:

      To upgrade you need to uninstall and re-install. The re-install option does nothing.

      Hi Tom …is the fix for the filter reload problem now in the new version? Thanks...

      Yes it is.

      -Tom Schaefer
      SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

      Please support pfBlocker | File Browser | Strikeback

      1 Reply Last reply Reply Quote 0
      • A
        Atlanta-Mike
        last edited by

        Thanks so much.  Both Country Block and I-Blocklist are running fine now.  Thanks again!!

        1 Reply Last reply Reply Quote 0
        • F
          focalguy
          last edited by

          @tommyboy180:

          @focalguy:

          Thanks Tom,

          I understand you are doing this as time permits and you have other things to do. I also understand it is Beta. I was hoping it was just something I was missing and it would be an easy fix.

          I'm not really sure if there are any logs I can capture or anything I can do to dig deeper as to why it is not working. If I can be of any help, please let me know. This is a nice package and I appreciate the work you put into it!

          You can follow the process by running convert-execute.sh via the command line and watching the stdout. I will update my BETA 2.0 to the latest and check it it works. What other packages do you have installed?

          Thanks. I have no other packages installed although I did have the Open-VM Tools installed since this is running in VMWare ESXi 4.1 but since that package is not working right now I removed it. I did remove this package and then install it again to make sure I am on the latest.

          This is what I get below: is it having trouble finding perl? Yea, I just checked and /usr/bin/perl doesn't exist.

          [2.0-RC1][admin@removedname]/usr/local/www/packages/ipblocklist(5): ./convert-execute.sh
          1 table deleted.
          1 table deleted.
          ./convert-execute.sh: /usr/bin/perl: not found
          ./convert-execute.sh: /usr/bin/perl: not found
          ./convert-execute.sh: /usr/bin/perl: not found
          rm: /usr/local/www/packages/ipblocklist/lists/ipfw.ipfwTEMP: No such file or directory
          rm: Wlists/whitelistTEMP: No such file or directory
          rm: /tmp/rules.debug.tmp: No such file or directory
          rm: /tmp/rules.debug.tmp: No such file or directory
          0
          1
          2
          3
          4
          5
          --snip--
          .
          .
          .
          142
          
          
          1 Reply Last reply Reply Quote 0
          • T
            tommyboy180
            last edited by

            @focalguy:

            @tommyboy180:

            @focalguy:

            Thanks Tom,

            I understand you are doing this as time permits and you have other things to do. I also understand it is Beta. I was hoping it was just something I was missing and it would be an easy fix.

            I'm not really sure if there are any logs I can capture or anything I can do to dig deeper as to why it is not working. If I can be of any help, please let me know. This is a nice package and I appreciate the work you put into it!

            You can follow the process by running convert-execute.sh via the command line and watching the stdout. I will update my BETA 2.0 to the latest and check it it works. What other packages do you have installed?

            Thanks. I have no other packages installed although I did have the Open-VM Tools installed since this is running in VMWare ESXi 4.1 but since that package is not working right now I removed it. I did remove this package and then install it again to make sure I am on the latest.

            This is what I get below: is it having trouble finding perl? Yea, I just checked and /usr/bin/perl doesn't exist.

            [2.0-RC1][admin@removedname]/usr/local/www/packages/ipblocklist(5): ./convert-execute.sh
            1 table deleted.
            1 table deleted.
            ./convert-execute.sh: /usr/bin/perl: not found
            ./convert-execute.sh: /usr/bin/perl: not found
            ./convert-execute.sh: /usr/bin/perl: not found
            rm: /usr/local/www/packages/ipblocklist/lists/ipfw.ipfwTEMP: No such file or directory
            rm: Wlists/whitelistTEMP: No such file or directory
            rm: /tmp/rules.debug.tmp: No such file or directory
            rm: /tmp/rules.debug.tmp: No such file or directory
            0
            1
            2
            3
            4
            5
            --snip--
            .
            .
            .
            142
            
            

            Perl get's installed with the compatability package in BETA 2.0. It looks like you're missing perl. Try pkg add -r perl.

            -Tom Schaefer
            SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

            Please support pfBlocker | File Browser | Strikeback

            1 Reply Last reply Reply Quote 0
            • F
              focalguy
              last edited by

              Yes! That did it. For others, it's actually "pkg_add -r perl".

              Thank you for the help! Any idea why my system didn't get it?

              1 Reply Last reply Reply Quote 0
              • T
                tommyboy180
                last edited by

                @focalguy:

                Yes! That did it. For others, it's actually "pkg_add -r perl".

                Thank you for the help! Any idea why my system didn't get it?

                Not sure. Line 58 of the install script should have done it.
                http://redmine.pfsense.org/projects/pfsense-packages/repository/revisions/master/entry/config/ipblocklist/8/ipblocklist.inc

                Good question.

                -Tom Schaefer
                SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                Please support pfBlocker | File Browser | Strikeback

                1 Reply Last reply Reply Quote 0
                • M
                  Macom2007
                  last edited by

                  I am on the latest snapshot and i am getting this error while trying to start Country Block :

                  /tmp/rules.debug:189: cannot load "/usr/local/www/packages/ipblocklist/lists/ipfw.ipfw": No such file or directory

                  I removed the package and installed it again already.

                  Any suggestions ?

                  1 Reply Last reply Reply Quote 0
                  • M
                    Macom2007
                    last edited by

                    No one ?

                    1 Reply Last reply Reply Quote 0
                    • T
                      tommyboy180
                      last edited by

                      @Macom2007:

                      No one ?

                      Is it breaking your package? By that I mean are you blocking anything despite the error?

                      -Tom Schaefer
                      SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                      Please support pfBlocker | File Browser | Strikeback

                      1 Reply Last reply Reply Quote 0
                      • M
                        Macom2007
                        last edited by

                        Except of CountryBlock all is working fine …

                        1 Reply Last reply Reply Quote 0
                        • T
                          tommyboy180
                          last edited by

                          @Macom2007:

                          Except of CountryBlock all is working fine …

                          Can you reword that? I don't understand if countryblock is blocking or not.

                          -Tom Schaefer
                          SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                          Please support pfBlocker | File Browser | Strikeback

                          1 Reply Last reply Reply Quote 0
                          • M
                            Macom2007
                            last edited by

                            Coutryblock is not blocking …

                            1 Reply Last reply Reply Quote 0
                            • T
                              tommyboy180
                              last edited by

                              @Macom2007:

                              Coutryblock is not blocking …

                              See if you have perl installed. Run "perl -v" at the command line.

                              -Tom Schaefer
                              SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                              Please support pfBlocker | File Browser | Strikeback

                              1 Reply Last reply Reply Quote 0
                              • M
                                Macom2007
                                last edited by

                                Yes, Perl is installed …

                                1 Reply Last reply Reply Quote 0
                                • T
                                  tommyboy180
                                  last edited by

                                  @Macom2007:

                                  Yes, Perl is installed …

                                  Take a look at lines 32-38 in convert-execute.sh. This is where the ipfw.ipfw file is created.
                                  If those commands don't work then the package cannot use the lists that you are using.

                                  One thing you need to verify is that your lists are in fact working. For example do they get download to lists/ and do the file inside lists/ have data?
                                  Another way you can find out what is broken is to step though convert-execute.sh and see what it's hanging on.

                                  I've done so many hours of testing this package on different platforms that I'm very confident it could be a misconfiguration or a list isn't working at it should be. Another thing is that embedded installs are prone to problems with this package.

                                  Let me know, I would be more than happy to do a full in-depth analysis review of your system to see what the issue is.

                                  -Tom Schaefer
                                  SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                  Please support pfBlocker | File Browser | Strikeback

                                  1 Reply Last reply Reply Quote 0
                                  • R
                                    root2020
                                    last edited by

                                    Do you have to manually apply updated filters or does IP-Blocklist automatically refresh the list?

                                    For example if I load a list from a site called www.sitelist.com/block.gz, will IP-Blocklist refresh everyday to get the lasted additions to this list?

                                    1 Reply Last reply Reply Quote 0
                                    • T
                                      tommyboy180
                                      last edited by

                                      @root2020:

                                      Do you have to manually apply updated filters or does IP-Blocklist automatically refresh the list?

                                      For example if I load a list from a site called www.sitelist.com/block.gz, will IP-Blocklist refresh everyday to get the lasted additions to this list?

                                      The package will re-download the list every time it's applied. Without any modifications this could be every 5 minutes or once a day, this is because Ipblockist is re-applied on filter reload. Now if you need to make sure it's being downloaded every day then install a cron job.

                                      I think it's safe to say that your package is re-applying the list every day or at least every other day.

                                      -Tom Schaefer
                                      SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                      Please support pfBlocker | File Browser | Strikeback

                                      1 Reply Last reply Reply Quote 0
                                      • P
                                        pathia
                                        last edited by

                                        Not really sure where I could get the logs to show what's going on.  The situation is this.

                                        IP-Blocklist works fine, but after a few hours, the whitelist is forgotten and it ignores it entirely.  If I login to the router and hit "Save/Update", it'll start using the whitelist again.  Obviously this isn't ideal.  Any idea what I could do to figure out why it stops using it?  I can't find any messages indicating that the whitelist isn't found, it's stored on the same server the blocklist is coming from…

                                        1 Reply Last reply Reply Quote 0
                                        • R
                                          root2020
                                          last edited by

                                          I removed the IP-Blocklist and I get this error every time I reload the firewall filter. Is there anyway to manually remove it using the command-line? FYI, I also get this same error when I just disable the IP-Blocklist. :'(

                                          Thanks,

                                          Rhett

                                          System Logs:
                                          php: : The command '/usr/local/pkg/pf/IP-Blocklist.sh start' returned exit code '1', the output was 'not running root: IP-Blocklist was found not running Status: 404 Not Found Content-type: text/html No input file specified. 0 table deleted. 0 table deleted. ls: /usr/local/www/packages/ipblocklist/lists: No such file or directory rm: /usr/local/www/packages/ipblocklist/lists/ipfw.ipfwTEMP: No such file or directory /usr/local/pkg/pf/IP-Blocklist.sh: cannot create /usr/local/www/packages/ipblocklist/lists/ipfw.ipfwTEMP: No such file or directory /usr/bin/sort: open failed: /usr/local/www/packages/ipblocklist/lists/ipfw.ipfw: No such file or directory mv: rename /usr/local/www/packages/ipblocklist/lists/ipfw.ipfwTEMP to /usr/local/www/packages/ipblocklist/lists/ipfw.ipfw: No such file or directory rm: /usr/local/www/packages/ipblocklist/Wlists/whitelistTEMP: No such file or directory /usr/bin/sort: open failed: Wlists/whitelist: No such file or directory rm: /tmp/rules.debug.tmp: No such fi

                                          1 Reply Last reply Reply Quote 0
                                          • T
                                            tommyboy180
                                            last edited by

                                            @root2020:

                                            I removed the IP-Blocklist and I get this error every time I reload the firewall filter. Is there anyway to manually remove it using the command-line? FYI, I also get this same error when I just disable the IP-Blocklist. :'(

                                            Thanks,

                                            Rhett

                                            System Logs:
                                            php: : The command '/usr/local/pkg/pf/IP-Blocklist.sh start' returned exit code '1', the output was 'not running root: IP-Blocklist was found not running Status: 404 Not Found Content-type: text/html No input file specified. 0 table deleted. 0 table deleted. ls: /usr/local/www/packages/ipblocklist/lists: No such file or directory rm: /usr/local/www/packages/ipblocklist/lists/ipfw.ipfwTEMP: No such file or directory /usr/local/pkg/pf/IP-Blocklist.sh: cannot create /usr/local/www/packages/ipblocklist/lists/ipfw.ipfwTEMP: No such file or directory /usr/bin/sort: open failed: /usr/local/www/packages/ipblocklist/lists/ipfw.ipfw: No such file or directory mv: rename /usr/local/www/packages/ipblocklist/lists/ipfw.ipfwTEMP to /usr/local/www/packages/ipblocklist/lists/ipfw.ipfw: No such file or directory rm: /usr/local/www/packages/ipblocklist/Wlists/whitelistTEMP: No such file or directory /usr/bin/sort: open failed: Wlists/whitelist: No such file or directory rm: /tmp/rules.debug.tmp: No such fi

                                            try rm -R /usr/local/www/packages/ipblocklist
                                            Remove the xml and inc file from /usr/local/pkg
                                            Also see if the start script is in /usr/local/rc.d

                                            -Tom Schaefer
                                            SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                            Please support pfBlocker | File Browser | Strikeback

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.