IP-Blocklist
-
Thanks Tom,
I understand you are doing this as time permits and you have other things to do. I also understand it is Beta. I was hoping it was just something I was missing and it would be an easy fix.
I'm not really sure if there are any logs I can capture or anything I can do to dig deeper as to why it is not working. If I can be of any help, please let me know. This is a nice package and I appreciate the work you put into it!
-
Thanks Tom,
I understand you are doing this as time permits and you have other things to do. I also understand it is Beta. I was hoping it was just something I was missing and it would be an easy fix.
I'm not really sure if there are any logs I can capture or anything I can do to dig deeper as to why it is not working. If I can be of any help, please let me know. This is a nice package and I appreciate the work you put into it!
You can follow the process by running convert-execute.sh via the command line and watching the stdout. I will update my BETA 2.0 to the latest and check it it works. What other packages do you have installed?
-
I have looked through this tread and can't seem to find it, how do you keep IP-Block list running? I can hit save and it will run for a little while but then when I check a few minutes later it is not running again. I have tried uninstalling and reinstalling and am getting the same results. I am also getting the same results with Country Block. However using the cron job below, I can at least get it going again automatically. It does make me wonder if these two packages spend more time not running than running, just how much use I am getting out of them.
*/5 * * * * root /usr/local/etc/rc.d/countryblock.sh
I should say, my assumption is always that I did something wrong, I just need a little help solving this one.
I guess this is due to another process reloading the filters. If i am correct this will remove the ipblocklist from the rules and therefore disable it.
@Tom,
Can't you add a link to '/usr/local/pkg/pf/' qouting from http://remcobressers.nl/2009/08/configuring-native-ipv6-pfsense/:After some searching on the box, i noticed that after changing things in the GUI the function filter_configure_sync() is called and the rules will be flushed.
This function can be found in /etc/inc/filter.inc (line 78). In the function, there’s a hook to a plugin directory. When the function filter_configure_sync() is called, the function will look in the /usr/local/pkg/pf directory for scripts, which will be executed. This only happens if scripts end with “.sh” as the extension.-m4rcu5
You are a freaking genius! This is exactly what I was looking for! Everyone is going to be so happy once I commit these changes!
Thank you again m4rcu5! -
You are a freaking genius! This is exactly what I was looking for! Everyone is going to be so happy once I commit these changes!
Thank you again m4rcu5!Tom, do you think this change will fix my issue?
-
You are a freaking genius! This is exactly what I was looking for! Everyone is going to be so happy once I commit these changes!
Thank you again m4rcu5!Tom, do you think this change will fix my issue?
It should. The only reason why the package stop working is because the firewall reloaded it's rules, either because of a change you made, reboot, or the system did it.
So what this changes does it when ever there is a firewall reload the package will automatically be reloaded as well.Therefore you should have no down time and thus eliminating the need for the cron job completely. I'm still testing right now and someone else is testing embedded for me. Hopefully we get positive results.
-
You are a freaking genius! This is exactly what I was looking for! Everyone is going to be so happy once I commit these changes!
Thank you again m4rcu5!Your welcome. I actually wanted to mail it to you a few weeks ago but totally forgot :-( Sorry!
-m4rcu5
-
I noticed their were new packages out available a couple of nights ago and re-installed both Country Block and IP-Blocklist, but both still stop running. Do I need to do something different to keep them running (ie, uninstall and then re-install vs just choosing the re-install option)?
-
I noticed their were new packages out available a couple of nights ago and re-installed both Country Block and IP-Blocklist, but both still stop running. Do I need to do something different to keep them running (ie, uninstall and then re-install vs just choosing the re-install option)?
To upgrade you need to uninstall and re-install. The re-install option does nothing.
-
To upgrade you need to uninstall and re-install. The re-install option does nothing.
Hi Tom …is the fix for the filter reload problem now in the new version? Thanks...
-
To upgrade you need to uninstall and re-install. The re-install option does nothing.
Hi Tom …is the fix for the filter reload problem now in the new version? Thanks...
Yes it is.
-
Thanks so much. Both Country Block and I-Blocklist are running fine now. Thanks again!!
-
Thanks Tom,
I understand you are doing this as time permits and you have other things to do. I also understand it is Beta. I was hoping it was just something I was missing and it would be an easy fix.
I'm not really sure if there are any logs I can capture or anything I can do to dig deeper as to why it is not working. If I can be of any help, please let me know. This is a nice package and I appreciate the work you put into it!
You can follow the process by running convert-execute.sh via the command line and watching the stdout. I will update my BETA 2.0 to the latest and check it it works. What other packages do you have installed?
Thanks. I have no other packages installed although I did have the Open-VM Tools installed since this is running in VMWare ESXi 4.1 but since that package is not working right now I removed it. I did remove this package and then install it again to make sure I am on the latest.
This is what I get below: is it having trouble finding perl? Yea, I just checked and /usr/bin/perl doesn't exist.
[2.0-RC1][admin@removedname]/usr/local/www/packages/ipblocklist(5): ./convert-execute.sh 1 table deleted. 1 table deleted. ./convert-execute.sh: /usr/bin/perl: not found ./convert-execute.sh: /usr/bin/perl: not found ./convert-execute.sh: /usr/bin/perl: not found rm: /usr/local/www/packages/ipblocklist/lists/ipfw.ipfwTEMP: No such file or directory rm: Wlists/whitelistTEMP: No such file or directory rm: /tmp/rules.debug.tmp: No such file or directory rm: /tmp/rules.debug.tmp: No such file or directory 0 1 2 3 4 5 --snip-- . . . 142
-
Thanks Tom,
I understand you are doing this as time permits and you have other things to do. I also understand it is Beta. I was hoping it was just something I was missing and it would be an easy fix.
I'm not really sure if there are any logs I can capture or anything I can do to dig deeper as to why it is not working. If I can be of any help, please let me know. This is a nice package and I appreciate the work you put into it!
You can follow the process by running convert-execute.sh via the command line and watching the stdout. I will update my BETA 2.0 to the latest and check it it works. What other packages do you have installed?
Thanks. I have no other packages installed although I did have the Open-VM Tools installed since this is running in VMWare ESXi 4.1 but since that package is not working right now I removed it. I did remove this package and then install it again to make sure I am on the latest.
This is what I get below: is it having trouble finding perl? Yea, I just checked and /usr/bin/perl doesn't exist.
[2.0-RC1][admin@removedname]/usr/local/www/packages/ipblocklist(5): ./convert-execute.sh 1 table deleted. 1 table deleted. ./convert-execute.sh: /usr/bin/perl: not found ./convert-execute.sh: /usr/bin/perl: not found ./convert-execute.sh: /usr/bin/perl: not found rm: /usr/local/www/packages/ipblocklist/lists/ipfw.ipfwTEMP: No such file or directory rm: Wlists/whitelistTEMP: No such file or directory rm: /tmp/rules.debug.tmp: No such file or directory rm: /tmp/rules.debug.tmp: No such file or directory 0 1 2 3 4 5 --snip-- . . . 142
Perl get's installed with the compatability package in BETA 2.0. It looks like you're missing perl. Try pkg add -r perl.
-
Yes! That did it. For others, it's actually "pkg_add -r perl".
Thank you for the help! Any idea why my system didn't get it?
-
Yes! That did it. For others, it's actually "pkg_add -r perl".
Thank you for the help! Any idea why my system didn't get it?
Not sure. Line 58 of the install script should have done it.
http://redmine.pfsense.org/projects/pfsense-packages/repository/revisions/master/entry/config/ipblocklist/8/ipblocklist.incGood question.
-
I am on the latest snapshot and i am getting this error while trying to start Country Block :
/tmp/rules.debug:189: cannot load "/usr/local/www/packages/ipblocklist/lists/ipfw.ipfw": No such file or directory
I removed the package and installed it again already.
Any suggestions ?
-
No one ?
-
No one ?
Is it breaking your package? By that I mean are you blocking anything despite the error?
-
Except of CountryBlock all is working fine …
-
Except of CountryBlock all is working fine …
Can you reword that? I don't understand if countryblock is blocking or not.
-
Coutryblock is not blocking …
-
Coutryblock is not blocking …
See if you have perl installed. Run "perl -v" at the command line.
-
Yes, Perl is installed …
-
Yes, Perl is installed …
Take a look at lines 32-38 in convert-execute.sh. This is where the ipfw.ipfw file is created.
If those commands don't work then the package cannot use the lists that you are using.One thing you need to verify is that your lists are in fact working. For example do they get download to lists/ and do the file inside lists/ have data?
Another way you can find out what is broken is to step though convert-execute.sh and see what it's hanging on.I've done so many hours of testing this package on different platforms that I'm very confident it could be a misconfiguration or a list isn't working at it should be. Another thing is that embedded installs are prone to problems with this package.
Let me know, I would be more than happy to do a full in-depth analysis review of your system to see what the issue is.
-
Do you have to manually apply updated filters or does IP-Blocklist automatically refresh the list?
For example if I load a list from a site called www.sitelist.com/block.gz, will IP-Blocklist refresh everyday to get the lasted additions to this list?
-
Do you have to manually apply updated filters or does IP-Blocklist automatically refresh the list?
For example if I load a list from a site called www.sitelist.com/block.gz, will IP-Blocklist refresh everyday to get the lasted additions to this list?
The package will re-download the list every time it's applied. Without any modifications this could be every 5 minutes or once a day, this is because Ipblockist is re-applied on filter reload. Now if you need to make sure it's being downloaded every day then install a cron job.
I think it's safe to say that your package is re-applying the list every day or at least every other day.
-
Not really sure where I could get the logs to show what's going on. The situation is this.
IP-Blocklist works fine, but after a few hours, the whitelist is forgotten and it ignores it entirely. If I login to the router and hit "Save/Update", it'll start using the whitelist again. Obviously this isn't ideal. Any idea what I could do to figure out why it stops using it? I can't find any messages indicating that the whitelist isn't found, it's stored on the same server the blocklist is coming from…
-
I removed the IP-Blocklist and I get this error every time I reload the firewall filter. Is there anyway to manually remove it using the command-line? FYI, I also get this same error when I just disable the IP-Blocklist. :'(
Thanks,
Rhett
System Logs:
php: : The command '/usr/local/pkg/pf/IP-Blocklist.sh start' returned exit code '1', the output was 'not running root: IP-Blocklist was found not running Status: 404 Not Found Content-type: text/html No input file specified. 0 table deleted. 0 table deleted. ls: /usr/local/www/packages/ipblocklist/lists: No such file or directory rm: /usr/local/www/packages/ipblocklist/lists/ipfw.ipfwTEMP: No such file or directory /usr/local/pkg/pf/IP-Blocklist.sh: cannot create /usr/local/www/packages/ipblocklist/lists/ipfw.ipfwTEMP: No such file or directory /usr/bin/sort: open failed: /usr/local/www/packages/ipblocklist/lists/ipfw.ipfw: No such file or directory mv: rename /usr/local/www/packages/ipblocklist/lists/ipfw.ipfwTEMP to /usr/local/www/packages/ipblocklist/lists/ipfw.ipfw: No such file or directory rm: /usr/local/www/packages/ipblocklist/Wlists/whitelistTEMP: No such file or directory /usr/bin/sort: open failed: Wlists/whitelist: No such file or directory rm: /tmp/rules.debug.tmp: No such fi -
I removed the IP-Blocklist and I get this error every time I reload the firewall filter. Is there anyway to manually remove it using the command-line? FYI, I also get this same error when I just disable the IP-Blocklist. :'(
Thanks,
Rhett
System Logs:
php: : The command '/usr/local/pkg/pf/IP-Blocklist.sh start' returned exit code '1', the output was 'not running root: IP-Blocklist was found not running Status: 404 Not Found Content-type: text/html No input file specified. 0 table deleted. 0 table deleted. ls: /usr/local/www/packages/ipblocklist/lists: No such file or directory rm: /usr/local/www/packages/ipblocklist/lists/ipfw.ipfwTEMP: No such file or directory /usr/local/pkg/pf/IP-Blocklist.sh: cannot create /usr/local/www/packages/ipblocklist/lists/ipfw.ipfwTEMP: No such file or directory /usr/bin/sort: open failed: /usr/local/www/packages/ipblocklist/lists/ipfw.ipfw: No such file or directory mv: rename /usr/local/www/packages/ipblocklist/lists/ipfw.ipfwTEMP to /usr/local/www/packages/ipblocklist/lists/ipfw.ipfw: No such file or directory rm: /usr/local/www/packages/ipblocklist/Wlists/whitelistTEMP: No such file or directory /usr/bin/sort: open failed: Wlists/whitelist: No such file or directory rm: /tmp/rules.debug.tmp: No such fitry rm -R /usr/local/www/packages/ipblocklist
Remove the xml and inc file from /usr/local/pkg
Also see if the start script is in /usr/local/rc.d -
Thank you for the information.
I deleted a file and things are working good again.
Looks like you need to have your uninstaller delete the following file:
/usr/local/pkg/pf/IP-Blocklist.sh -
Thank you for the information.
I deleted a file and things are working good again.
Looks like you need to have your uninstaller delete the following file:
/usr/local/pkg/pf/IP-Blocklist.shThank you. I will update that!
-
try rm -R /usr/local/www/packages/ipblocklist
Remove the xml and inc file from /usr/local/pkg
Also see if the start script is in /usr/local/rc.dHow to remove the xml and inc files using the webGUI? Also, I'm using windows and experience root2020's problem. TIA
-
The uninstaller seems to remove those two files. Do an uninstall via the GUI and then just remove the "/usr/local/pkg/pf/IP-Blocklist.sh"
Goto > Diagnotics > Command Line and type in the following
rm /usr/local/pkg/pf/IP-Blocklist.sh -
tnx. no more error on the syslog with ipblock… however, i have tx underrun. need to search the forum about that one.
Thanks again. ;) -
Hello,
samething with countryblock.sh
Thanks,
-
I'm running an embedded install of 2.0Beta5 and tried to make the changes listed in this thread in order to get it to work. However, I accidentally forgot a semicolon after the first line I added (require_once('config.inc')) and when I went to refresh the IP-Blocklist page I got the following error in the textbox:
Parse error: syntax error, unexpected T_ECHO in /usr/local/www/packages/ipblocklist/ipblocklist_list.php on line 5
Since then, I've tried everything I can to get back to a cleanly-installed state: I've undone the edits I made to that file, and I've even uninstalled and reinstalled the IP-Blacklist package, but whatever I do, I now always get that error. How can I get back to a clean slate without completely reinstalling pfsense?
My best advice is to uninstall the package, check the file system (/usr/local/www/ipblocklist) and delete it, and then reboot. That should help you start from a clean slate.
Hmm, after uninstalling I looked in /usr/local/www/ and there was no file or directory ipblocklist. I then rebooted, and reinstalled the package. Same exact error as before. The strange thing, is that if I look at the file /usr/local/www/packages/ipblocklist/ipblocklist_list.php, it's the stock, unmodified form (i.e., correct syntax)!? I'm very confused as to what's going on.
Sorry. The directory is /usr/local/www/packages/ipblocklist/
Uninstall and check to make sure that it's deleted.
Try executing the .sh manually in your console if you get the same error again.I can add to this. I was having the same issue with a mistype such that on the main tab there was a similar error message to Systex. An uninstall-manual flush/reinstall did nothing. I did not reboot however. What I have realized is that everything is fine but the message was stale and showing in the frame and this never refreshed. I right clicked on the frame and manually reloaded the frame where the error message was and this fixed everything for me as far as the display and the error message is concerned.
-
I got it installed with a couple of lists, when I check syslog i always get this message: "root: IP-Blocklist was found not running", if i goto Firewall > IP-Blocklist status says its running with a number of networks blocked, any idea what the issue here is?
Thank you
-
I got it installed with a couple of lists, when I check syslog i always get this message: "root: IP-Blocklist was found not running", if i goto Firewall > IP-Blocklist status says its running with a number of networks blocked, any idea what the issue here is?
Thank you
I think I may know what the issue is. I'm still doing work on the package but the binary files are no longer in the repo. This will be fixed very soon!
-
How does one create an importable whitelist? I play Guild Wars and NC interactive is blocked with Level-1 blacklist. I want to whitelist the subnets for Guild Wars, but have ended up beating my head on a brick wall trying to import. I don't have sufficient skills to edit within the Linux shell. Any other suggestions?
NC INTERACTIVE, INC:206.127.144.0-206.127.159.255
Thanks!
-
pfsense 2.0 R3
tommy can you fix the log for ipblocklist the
Enable Logging? does not stay enable once you click
save/update.Also was just wondering if you can make a
dashboard widget that can display the log files for
ipblocklist and country block so that we
can see what is being block thanks. something like to one for snort
and havp.