• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Country Block

pfSense Packages
79
691
664.5k
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • B
    Bummer
    last edited by May 10, 2011, 10:18 PM

    I don't recall what other forum posts I saw this in. They are all over the place. You need your own division or top. Maybe it's the config that I recall people losing. That's no problem and would be easy to redo.

    It sounds great! Do you know if it requires a reboot when it's installed?

    Thank you for your time!

    1 Reply Last reply Reply Quote 0
    • B
      Bummer
      last edited by May 12, 2011, 2:43 PM

      Another dumb question…

      After I install Country Block, I'm blocking all of the countries you have listed as top spammers. You made it easy, because those are the countries I do want to block.

      I do have a few clients that correspond with people in the countries I want to block because these people do programming for them. How do I go about blocking the country yet allowing a few specific IPs access to our network?

      Again, thanks for your time.

      1 Reply Last reply Reply Quote 0
      • B
        Bai Shen
        last edited by May 12, 2011, 2:48 PM

        @tommyboy180:

        There is no reason why you can't install it and try it. If it doesn't work, it doesn't work. It doesn't break anything or mess with your install at all.
        My money says that it will work just fine, in fact I guarantee that it works!

        Or your money back!

        :)

        1 Reply Last reply Reply Quote 0
        • M
          mgc6288
          last edited by May 12, 2011, 2:55 PM

          @Bai:

          @tommyboy180:

          There is no reason why you can't install it and try it. If it doesn't work, it doesn't work. It doesn't break anything or mess with your install at all.
          My money says that it will work just fine, in fact I guarantee that it works!

          Or your money back!

          :)

          Not like someone can't easily backup their current configuration, and at worse, reinstall pfsense…easy as all get out with minimal time.  This isn't a Windows Server rebuild...

          1 Reply Last reply Reply Quote 0
          • B
            Bummer
            last edited by May 12, 2011, 3:05 PM

            You're correct about reinstalling pfSense. It's fast and easy. The problem is that the data center is a 45 minute drive (one way) from where I'm located.

            I'm hoping to have the ability to install County Block yet allow specific IPs from banned countries access. I have a few clients that have people in those countries that do programming and they need to have access to their sites.

            1 Reply Last reply Reply Quote 0
            • M
              mgc6288
              last edited by May 12, 2011, 3:09 PM

              @Bummer:

              You're correct about reinstalling pfSense. It's fast and easy. The problem is that the data center is a 45 minute drive (one way) from where I'm located.

              I'm hoping to have the ability to install County Block yet allow specific IPs from banned countries access. I have a few clients that have people in those countries that do programming and they need to have access to their sites.

              Just bustin' your chops…I understand.  Being an IT one has to be sure before making willy-nilly decisions.  I've been using Country Block since its inception and it is awesome, in fact it is the reason I started pfsense.  I prefer the 1.2.3 version as it is solid.  As far as your questions about specific IPs...that would be a cool feature but I haven't seen it implemented yet.  I'm still trying to figure out why the email doesn't work effectively.  Hmm.  Good luck mate!

              1 Reply Last reply Reply Quote 0
              • T
                tommyboy180
                last edited by May 12, 2011, 9:37 PM

                @Bummer:

                Another dumb question…

                After I install Country Block, I'm blocking all of the countries you have listed as top spammers. You made it easy, because those are the countries I do want to block.

                I do have a few clients that correspond with people in the countries I want to block because these people do programming for them. How do I go about blocking the country yet allowing a few specific IPs access to our network?

                Again, thanks for your time.

                Take a look at the whitelist tab.

                -Tom Schaefer
                SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                Please support pfBlocker | File Browser | Strikeback

                1 Reply Last reply Reply Quote 0
                • M
                  mgc6288
                  last edited by May 12, 2011, 9:56 PM

                  @tommyboy180:

                  Take a look at the whitelist tab.

                  Damn…even comes with an example...  I'll just go back to that email tab...

                  1 Reply Last reply Reply Quote 0
                  • B
                    Bummer
                    last edited by May 13, 2011, 4:41 AM

                    Damn, I do feel like an idiot!

                    I guess I should have installed it and asked questions later!

                    Duh!

                    Thanks!

                    1 Reply Last reply Reply Quote 0
                    • J
                      jaredadams
                      last edited by May 14, 2011, 2:37 PM

                      Hi,

                      few more questions.

                      Is the IP address list updated automatically?

                      If not where are the files located for me to edit?

                      If I were to try to edit I noticed that countryipblocks.net format is x.x.x.x/sn.

                      I ask because I had someone spam one of my forums I host.  Their IP was in the Ukraine, but was not on the list from that website.  I have the person's IP address but I dont think theres any way for me to tell the subnet.

                      Any insight?

                      1 Reply Last reply Reply Quote 0
                      • T
                        tommyboy180
                        last edited by May 14, 2011, 3:16 PM

                        @jaredadams:

                        Hi,

                        few more questions.

                        Is the IP address list updated automatically?

                        If not where are the files located for me to edit?

                        If I were to try to edit I noticed that countryipblocks.net format is x.x.x.x/sn.

                        I ask because I had someone spam one of my forums I host.  Their IP was in the Ukraine, but was not on the list from that website.  I have the person's IP address but I dont think theres any way for me to tell the subnet.

                        Any insight?

                        What's the IP?

                        -Tom Schaefer
                        SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                        Please support pfBlocker | File Browser | Strikeback

                        1 Reply Last reply Reply Quote 0
                        • J
                          jaredadams
                          last edited by May 14, 2011, 4:21 PM

                          At this point I dont recall.  :(

                          1 Reply Last reply Reply Quote 0
                          • B
                            Bummer
                            last edited by May 14, 2011, 7:50 PM

                            Hey Tommyboy180

                            Don't you love it when we can't remember? I know you have to just shake your head.

                            1 Reply Last reply Reply Quote 0
                            • J
                              jaredadams
                              last edited by May 16, 2011, 2:41 PM

                              I banned the previous user from my forum which deleted any information pertaining to the IP address.  However a new spammer registered and i ran an ARIN lookup on his IP address.  It comes from this CIDR block in Denmark: 91.0.0.0/8

                              Obviously its not in the list,  how do I add this block to my list manually?  Where are the files for the lists located?

                              Thanks in advance!

                              1 Reply Last reply Reply Quote 0
                              • T
                                tommyboy180
                                last edited by May 16, 2011, 5:43 PM May 16, 2011, 5:36 PM

                                @jaredadams:

                                I banned the previous user from my forum which deleted any information pertaining to the IP address.  However a new spammer registered and i ran an ARIN lookup on his IP address.  It comes from this CIDR block in Denmark: 91.0.0.0/8

                                Obviously its not in the list,  how do I add this block to my list manually?  Where are the files for the lists located?

                                Thanks in advance!

                                Take a look at the denmark country at http://www.countryipblocks.net/country-blocks/select-formats/. This list is the one I have in the package. From what I can tell most of 91 is in there.

                                The entire 91.0.0.0/8 block does not belong to Denmark. Denmark only has a few networks out of that range. The EU also uses 91 as well as Russia. Therefore you need to find exactly what country that IP belongs to and block that country.

                                -Tom Schaefer
                                SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                Please support pfBlocker | File Browser | Strikeback

                                1 Reply Last reply Reply Quote 0
                                • G
                                  ghm
                                  last edited by May 24, 2011, 5:56 PM

                                  Just a quick "Thank You, Tommy!" Package seems to run smoothly on RC1 embedded now (tested for a couple of days now, survived test reboot, rule changes, and pppoe dialups). Just did a plain install, no manual cron jobs or anything.

                                  Best
                                  Georg

                                  1 Reply Last reply Reply Quote 0
                                  • T
                                    tommyboy180
                                    last edited by May 24, 2011, 8:14 PM

                                    @ghm:

                                    Just a quick "Thank You, Tommy!" Package seems to run smoothly on RC1 embedded now (tested for a couple of days now, survived test reboot, rule changes, and pppoe dialups). Just did a plain install, no manual cron jobs or anything.

                                    Best
                                    Georg

                                    Glad to hear it! I am constantly working on this package and other packages (even some future releases to come).
                                    If you like it that much consider donating at http://tomschaefer.org/pfsense/

                                    -Tom Schaefer
                                    SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                    Please support pfBlocker | File Browser | Strikeback

                                    1 Reply Last reply Reply Quote 0
                                    • B
                                      Bummer
                                      last edited by May 29, 2011, 12:48 PM

                                      I'm not sure why, but I had some issues installing Country Block.

                                      1. Before starting, I upgraded to the most recent version of pfSense (05-27-2011).
                                      2. After the box rebooted, I installed bandwidthd, all went good.
                                      3. I then tired installing Country Block and it failed. I tried to install it 3 more times with no luck.
                                      4. Finally, I un-installed bandwidthd and tried installing County Block. At this time, it appears that County Block installed okay. I then re-installed bandwidthd.

                                      My question is… how can I tell if County Block is working? I set it to logging, but can't find the logs to see if it's working. I know I'm missing something here.

                                      Thanks!

                                      1 Reply Last reply Reply Quote 0
                                      • T
                                        tommyboy180
                                        last edited by May 29, 2011, 1:38 PM

                                        @Bummer:

                                        I'm not sure why, but I had some issues installing Country Block.

                                        1. Before starting, I upgraded to the most recent version of pfSense (05-27-2011).
                                        2. After the box rebooted, I installed bandwidthd, all went good.
                                        3. I then tired installing Country Block and it failed. I tried to install it 3 more times with no luck.
                                        4. Finally, I un-installed bandwidthd and tried installing County Block. At this time, it appears that County Block installed okay. I then re-installed bandwidthd.

                                        My question is… how can I tell if County Block is working? I set it to logging, but can't find the logs to see if it's working. I know I'm missing something here.

                                        Thanks!

                                        You can tell if countryblock is running by going to the countryblock package page. At the bottom of the page it will tell you if it is running. When you have logging enabled firewall logs will be generated under the firewall tab. You may see countries being blocked or nothing at all depending on your settings.

                                        -Tom Schaefer
                                        SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                        Please support pfBlocker | File Browser | Strikeback

                                        1 Reply Last reply Reply Quote 0
                                        • G
                                          ghm
                                          last edited by May 29, 2011, 3:52 PM

                                          @tommyboy180:

                                          Glad to hear it! I am constantly working on this package and other packages (even some future releases to come).
                                          If you like it that much consider donating at http://tomschaefer.org/pfsense/

                                          Done. Have RC2 embedded now, still runs. Only thing is that I don't see blocling messages in the FW log either despite having logs enabled. Minor issue though. Still works, I can tell because I have logging on for a pass rule - and only get pass log entries for allowed countries.

                                          1 Reply Last reply Reply Quote 0
                                          • First post
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.