Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Country Block

    Scheduled Pinned Locked Moved pfSense Packages
    691 Posts 79 Posters 701.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      phl
      last edited by

      CountyBlock doesn't run as a service. It sounds like you committed your countries but the "Enable countryblock" check box isn't checked on the main page of the package.

      I read the posts after I had trouble. I uninstalled it and deleted the log file, reinstalled, rebooted, I then selected 2 countries, clicked commit countries - It replies that my settings have been saved, "currently 2 of 252 selected". And at the bottom it shows Current status = NOT running.  I then select the "Enable Country Block" box at the top and click save at the bottom. It then shows Current status = running, You are blocking 0 networks. In that same screen, my countries are still selected and it still shows "currently 2 of 252 selected". If I'm dong something wrong, I don't see it. phl

      1 Reply Last reply Reply Quote 0
      • T
        tommyboy180
        last edited by

        Are you able to access this file? : http://tomschaefer.org/pfsense/repo/countryblock/CIDR.php

        -Tom Schaefer
        SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

        Please support pfBlocker | File Browser | Strikeback

        1 Reply Last reply Reply Quote 0
        • P
          phl
          last edited by

          @tommyboy180:

          Are you able to access this file? : http://tomschaefer.org/pfsense/repo/countryblock/CIDR.php

          Yes I can

          1 Reply Last reply Reply Quote 0
          • T
            tommyboy180
            last edited by

            @phl:

            @tommyboy180:

            Are you able to access this file? : http://tomschaefer.org/pfsense/repo/countryblock/CIDR.php

            Yes I can

            Okay. Try to uninstall and re-install one more time. I think there was something going on with the server's gateway.

            -Tom Schaefer
            SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

            Please support pfBlocker | File Browser | Strikeback

            1 Reply Last reply Reply Quote 0
            • P
              phl
              last edited by

              @tommyboy180:

              @phl:

              @tommyboy180:

              Are you able to access this file? : http://tomschaefer.org/pfsense/repo/countryblock/CIDR.php

              Yes I can

              Okay. Try to uninstall and re-install one more time. I think there was something going on with the server's gateway.

              OK I also copied that to /tmp and I reinstalled and it ran and its good, thank you so much!

              1 Reply Last reply Reply Quote 0
              • T
                tommyboy180
                last edited by

                @phl:

                @tommyboy180:

                @phl:

                @tommyboy180:

                Are you able to access this file? : http://tomschaefer.org/pfsense/repo/countryblock/CIDR.php

                Yes I can

                Okay. Try to uninstall and re-install one more time. I think there was something going on with the server's gateway.

                OK I also copied that to /tmp and I reinstalled and it ran and its good, thank you so much!

                Sorry that it took so long to get installed. Just so everyone knows this issue will be fixed very soon. This won't be a problem any longer.

                -Tom Schaefer
                SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                Please support pfBlocker | File Browser | Strikeback

                1 Reply Last reply Reply Quote 0
                • T
                  tommyboy180
                  last edited by

                  Version 2.2 released.

                  • Fixed uninstall bug (http://forum.pfsense.org/index.php/topic,24769.msg207044.html#msg207044)

                  • Updated hosting for required files - Now stored on github (http://forum.pfsense.org/index.php/topic,25732.msg208214.html#msg208214)

                  -Tom Schaefer
                  SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                  Please support pfBlocker | File Browser | Strikeback

                  1 Reply Last reply Reply Quote 0
                  • S
                    Supermule Banned
                    last edited by

                    I get this after reinstall and reboot…

                    Aug 28 08:29:01 root: Countryblock was found not running
                    Aug 28 08:28:30 root: Countryblock was found not running
                    Aug 28 08:28:30 login: login on ttyv0 as root
                    Aug 28 08:28:29 check_reload_status: check_reload_status is starting
                    Aug 28 08:28:29 last message repeated 18 times
                    Aug 28 08:28:29 php: : The Country Block package is missing required dependencies and must be reinstalled.
                    Aug 28 08:28:29 last message repeated 29 times

                    It is running…at least it says so :)

                    1 Reply Last reply Reply Quote 0
                    • L
                      ljbowdish
                      last edited by

                      I had an OOPS this AM. ;D ;D
                      I was updating my country block, and inadvertently selected all.  It worked perfectly.  Unfortunately, we couldn't get to google, or email.  Took me  a few minutes to get it right.

                      1 Reply Last reply Reply Quote 0
                      • T
                        tommyboy180
                        last edited by

                        @ljbowdish:

                        I had an OOPS this AM. ;D ;D
                        I was updating my country block, and inadvertently selected all.  It worked perfectly.  Unfortunately, we couldn't get to google, or email.  Took me  a few minutes to get it right.

                        Ha! That's awesome.

                        -Tom Schaefer
                        SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                        Please support pfBlocker | File Browser | Strikeback

                        1 Reply Last reply Reply Quote 0
                        • E
                          elfchen
                          last edited by

                          I can not start it on latest PFSense.

                          Get:

                          Current Stauts = NOT running
                          pfctl: DICSETSTATUSIF
                          You are blocking 0 Networks

                          On an other PFSense engine with same release it worked well without problems - but on this firewall I get this error and don't know why.

                          Already tried: Steps on FAQ and reinstall.

                          As long as I did not click on "enable" the error is not shown. I can change all settings, but when I am ready and click on Enable it will not work and report these error.

                          1 Reply Last reply Reply Quote 0
                          • T
                            tommyboy180
                            last edited by

                            @elfchen:

                            I can not start it on latest PFSense.

                            Get:

                            Current Stauts = NOT running
                            pfctl: DICSETSTATUSIF
                            You are blocking 0 Networks

                            On an other PFSense engine with same release it worked well without problems - but on this firewall I get this error and don't know why.

                            Already tried: Steps on FAQ and reinstall.

                            As long as I did not click on "enable" the error is not shown. I can change all settings, but when I am ready and click on Enable it will not work and report these error.

                            That's a first for me. I will have to do some investigation. What have you done to try and fix the error?

                            -Tom Schaefer
                            SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                            Please support pfBlocker | File Browser | Strikeback

                            1 Reply Last reply Reply Quote 0
                            • E
                              elfchen
                              last edited by

                              Tried to reinstall. Tried to work with only one networkcard. Firewall itself works perfect:

                              Version

                              1.2.3-RELEASE
                              built on Sun Dec 6 23:21:36 EST 2009

                              Platform

                              pfSense

                              Uptime

                              State table size

                              Show states

                              MBUF Usage

                              319 /2310

                              @tommyboy180:

                              @elfchen:

                              I can not start it on latest PFSense.

                              Get:

                              Current Stauts = NOT running
                              pfctl: DICSETSTATUSIF
                              You are blocking 0 Networks

                              On an other PFSense engine with same release it worked well without problems - but on this firewall I get this error and don't know why.

                              Already tried: Steps on FAQ and reinstall.

                              As long as I did not click on "enable" the error is not shown. I can change all settings, but when I am ready and click on Enable it will not work and report these error.

                              That's a first for me. I will have to do some investigation. What have you done to try and fix the error?

                              1 Reply Last reply Reply Quote 0
                              • W
                                woc38
                                last edited by

                                This week I updated my pfSense 2.0RC3 to pfSense 2.0-Release. Only having a few firewall rules, no other packages.
                                Today, after some reading, I installed Country Block via the packages-web-interface.

                                • No errors were shown in the install window;
                                • For testing I only checked China, and clicked on Commit Countries;
                                • I checked "Enable Country Block" and clicked on Save/Update;
                                • I clicked on the Apply Changes button that appears, but after the click, it won't disappear;
                                • At the bottom of the page I see:
                                  Current Status = Running
                                  You are blocking 3408 Networks

                                So far, all seems fine.
                                But after this I checked the system logs (partial copy):

                                Sep 21 13:02:06 php: /pkg_mgr_install.php: Beginning package installation for Country Block.
                                Sep 21 13:02:07 check_reload_status: Syncing firewall
                                Sep 21 13:02:33 login: login on ttyu0 as root
                                Sep 21 13:02:33 check_reload_status: Syncing firewall
                                Sep 21 13:02:34 check_reload_status: Reloading filter
                                Sep 21 13:02:35 check_reload_status: Syncing firewall
                                Sep 21 13:02:41 root: Countryblock was found not running
                                Sep 21 13:02:43 php: : The command '/usr/local/pkg/pf/countryblock.sh start' returned exit code '1', the output was 'not running root: Countryblock was found not running Status: 404 Not Found Content-type: text/html  No input file specified. 0 table deleted. 97 22 rm: /tmp/rules.debug.tmp: No such file or directory rm: /tmp/rules.debug.tmp: No such file or directory 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168'
                                Sep 21 13:04:28 php: /packages/countryblock/countryblock.php: The command 'rm -R /usr/local/www/packages/countryblock/lists' returned exit code '1', the output was 'rm: /usr/local/www/packages/countryblock/lists: No such file or directory'
                                Sep 21 13:04:29 php: /packages/countryblock/countryblock.php: The command 'rm errorOUT.txt' returned exit code '1', the output was 'rm: errorOUT.txt: No such file or directory'
                                Sep 21 13:05:48 check_reload_status: Reloading filter
                                Sep 21 13:05:53 php: /packages/countryblock/countryblock.php: The command 'rm lists/temp' returned exit code '1', the output was 'rm: lists/temp: No such file or directory'
                                Sep 21 13:05:57 check_reload_status: Reloading filter
                                Sep 21 13:05:59 root: Countryblock was found not running

                                The last entry keeps appearing, even after I did the trick with the editing/saving of a random firewall rule

                                How can I tell the package is running? And what about the errors in the log file?

                                And, maybe a newbie question, I checked the log option in settings, but what does it log exactly and where?

                                1 Reply Last reply Reply Quote 0
                                • T
                                  tommyboy180
                                  last edited by

                                  The logs can be ignored. There is a lot of output that is a little confusing. You get a lot of errors because there are several different installs out there and the package is built for stability on multiple install types. Those errors are repeated because the firewall filter gets regenerated when a system change occurs, which can be very frequent depending on your setup, and countryblock runs its script to ensure it's running when this happens.

                                  Basically if it says it's running and there are networks being blocked then it's working 100% because it queries that directly from the firewall rules.

                                  -Tom Schaefer
                                  SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                  Please support pfBlocker | File Browser | Strikeback

                                  1 Reply Last reply Reply Quote 0
                                  • M
                                    mentalhemroids
                                    last edited by

                                    It still doesn't seem as though Country Block is working - I have all the spam recommended countries enabled, but can't seem to find one that I can block… Any suggestions on a site to test?  Running 2.0-RELEASE (i386) built on Tue Sep 13 17:28:43 EDT 2011.
                                    I have tried to get both this and IP Blocklist to work... can't seem to get it going. The interface says they are running though.  Thanks!

                                    Sep 21 09:05:39 root: Countryblock was found not running
                                    Sep 21 09:05:34 root: IP-Blocklist was found not running
                                    Sep 21 09:05:22 root: Countryblock was found not running
                                    Sep 21 09:05:16 root: IP-Blocklist was found not running
                                    Sep 21 09:05:11 php: /pkg_edit.php: Reloading Squid for configuration sync
                                    Sep 21 09:05:11 check_reload_status: Reloading filter
                                    Sep 21 09:05:11 check_reload_status: Syncing firewall
                                    Sep 21 09:05:10 check_reload_status: Reloading filter
                                    Sep 21 09:05:10 php: /pkg_edit.php: Reloading Squid for configuration sync
                                    Sep 21 08:55:50 php: /packages/countryblock/countryblock.php: The command 'rm lists/temp' returned exit code '1', the output was 'rm: lists/temp: No such file or directory'
                                    Sep 21 08:49:56 php: : The command '/usr/local/pkg/pf/countryblock.sh start' returned exit code '1', the output was 'not running root: Countryblock was found not running Status: 404 Not Found Content-type: text/html No input file specified. 0 table deleted. 134 19 rm: /tmp/rules.debug.tmp: No such file or directory rm: /tmp/rules.debug.tmp: No such file or directory 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189
                                    Sep 21 08:49:45 root: Countryblock was found not running
                                    Sep 21 08:49:40 root: IP-Blocklist was found not running
                                    Sep 21 08:49:34 check_reload_status: Reloading filter
                                    Sep 21 08:49:27 check_reload_status: Syncing firewall
                                    Sep 21 08:49:26 php: /pkg_mgr_install.php: Beginning package installation for Country Block.
                                    Sep 21 08:49:25 check_reload_status: Syncing firewall
                                    Sep 21 08:47:26 check_reload_status: Syncing firewall
                                    Sep 21 08:46:33 check_reload_status: Syncing firewall
                                    Sep 21 08:46:33 php: /packages/ipblocklist/ipblocklist.php: The command 'rm errorOUT.txt' returned exit code '1', the output was 'rm: errorOUT.txt: No such file or directory'
                                    Sep 21 08:46:33 php: /packages/ipblocklist/ipblocklist.php: The command 'rm -R /usr/local/www/packages/ipblocklist/lists' returned exit code '1', the output was 'rm: /usr/local/www/packages/ipblocklist/lists: No such file or directory'
                                    Sep 21 08:46:33 php: /packages/ipblocklist/ipblocklist.php: The command 'ipfw -f flush' returned exit code '69', the output was 'ipfw: setsockopt(IP_FW_FLUSH): Protocol not available'
                                    Sep 21 08:43:17 check_reload_status: Syncing firewall
                                    Sep 21 08:43:17 php: /packages/ipblocklist/ipblocklist.php: The command 'ipfw -f flush' returned exit code '69', the output was 'ipfw: setsockopt(IP_FW_FLUSH): Protocol not available'
                                    Sep 21 08:41:34 root: IP-Blocklist was found not running
                                    Sep 21 08:41:28 check_reload_status: Syncing firewall
                                    Sep 21 08:41:28 check_reload_status: Reloading filter
                                    Sep 21 08:41:27 check_reload_status: Syncing firewall
                                    Sep 21 08:39:48 check_reload_status: Syncing firewall
                                    Sep 21 08:39:48 php: /pkg_mgr_install.php: Beginning package installation for IP-Blocklist.

                                    1 Reply Last reply Reply Quote 0
                                    • T
                                      tommyboy180
                                      last edited by

                                      Are you blocking outbound traffic?

                                      -Tom Schaefer
                                      SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                      Please support pfBlocker | File Browser | Strikeback

                                      1 Reply Last reply Reply Quote 0
                                      • M
                                        mentalhemroids
                                        last edited by

                                        @tommyboy180:

                                        Are you blocking outbound traffic?

                                        Yes, I tried this website and made sure it resolved to Russia and it still lets me go to it.
                                        http://www.prodisney.ru/index.php?page=clones.php

                                        My system logs keep showing this.. and after saving settings I get the exit code message.

                                        Sep 21 09:28:03 php: /packages/countryblock/countryblock.php: The command 'rm lists/temp' returned exit code '1', the output was 'rm: lists/temp: No such file or directory'
                                        Sep 21 09:27:47 php: /packages/countryblock/countryblock.php: The command 'rm lists/temp' returned exit code '1', the output was 'rm: lists/temp: No such file or directory'
                                        Sep 21 09:05:39 root: Countryblock was found not running
                                        Sep 21 09:05:34 root: IP-Blocklist was found not running
                                        Sep 21 09:05:22 root: Countryblock was found not running
                                        Sep 21 09:05:16 root: IP-Blocklist was found not running

                                        1 Reply Last reply Reply Quote 0
                                        • M
                                          mentalhemroids
                                          last edited by

                                          Just tried the site again after saving and applying - squid isn't letting it come up now.  I'm going to try a couple others.

                                          194.226.127.34 - http://eng.kremlin.ru/ is blocked now.
                                          203.199.104.241 - http://www.airindia.in is blocked… so maybe it is working...

                                          I'll keep testing.  Thanks!

                                          Update Since a little bit ago I'm getting these again...

                                          Sep 21 10:09:45 php: /pkg_edit.php: Reloading Squid for configuration sync
                                          Sep 21 10:09:45 check_reload_status: Reloading filter
                                          Sep 21 10:09:45 check_reload_status: Syncing firewall
                                          Sep 21 10:09:44 check_reload_status: Reloading filter
                                          Sep 21 10:09:44 php: /pkg_edit.php: Reloading Squid for configuration sync
                                          Sep 21 10:01:40 root: Countryblock was found not running
                                          Sep 21 10:01:35 root: IP-Blocklist was found not running
                                          Sep 21 10:01:23 root: Countryblock was found not running
                                          Sep 21 10:01:17 root: IP-Blocklist was found not running
                                          Sep 21 10:01:12 php: /pkg_edit.php: Reloading Squid for configuration sync
                                          Sep 21 10:01:11 check_reload_status: Reloading filter
                                          Sep 21 10:01:11 check_reload_status: Syncing firewall
                                          Sep 21 10:01:11 check_reload_status: Reloading filter
                                          Sep 21 10:01:11 php: /pkg_edit.php: Reloading Squid for configuration sync

                                          1 Reply Last reply Reply Quote 0
                                          • T
                                            tommyboy180
                                            last edited by

                                            The way you have your system configured (addons or packages) is causing your filter to be re-generated. Countryblock only reacts to that event and restarts. What your seeing is the package responding to system events.

                                            -Tom Schaefer
                                            SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                            Please support pfBlocker | File Browser | Strikeback

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.