Country Block
-
I had an OOPS this AM. ;D ;D
I was updating my country block, and inadvertently selected all. It worked perfectly. Unfortunately, we couldn't get to google, or email. Took me a few minutes to get it right.Ha! That's awesome.
-
I can not start it on latest PFSense.
Get:
Current Stauts = NOT running
pfctl: DICSETSTATUSIF
You are blocking 0 NetworksOn an other PFSense engine with same release it worked well without problems - but on this firewall I get this error and don't know why.
Already tried: Steps on FAQ and reinstall.
As long as I did not click on "enable" the error is not shown. I can change all settings, but when I am ready and click on Enable it will not work and report these error.
-
I can not start it on latest PFSense.
Get:
Current Stauts = NOT running
pfctl: DICSETSTATUSIF
You are blocking 0 NetworksOn an other PFSense engine with same release it worked well without problems - but on this firewall I get this error and don't know why.
Already tried: Steps on FAQ and reinstall.
As long as I did not click on "enable" the error is not shown. I can change all settings, but when I am ready and click on Enable it will not work and report these error.
That's a first for me. I will have to do some investigation. What have you done to try and fix the error?
-
Tried to reinstall. Tried to work with only one networkcard. Firewall itself works perfect:
Version
1.2.3-RELEASE
built on Sun Dec 6 23:21:36 EST 2009Platform
pfSense
Uptime
State table size
Show states
MBUF Usage
319 /2310
I can not start it on latest PFSense.
Get:
Current Stauts = NOT running
pfctl: DICSETSTATUSIF
You are blocking 0 NetworksOn an other PFSense engine with same release it worked well without problems - but on this firewall I get this error and don't know why.
Already tried: Steps on FAQ and reinstall.
As long as I did not click on "enable" the error is not shown. I can change all settings, but when I am ready and click on Enable it will not work and report these error.
That's a first for me. I will have to do some investigation. What have you done to try and fix the error?
-
This week I updated my pfSense 2.0RC3 to pfSense 2.0-Release. Only having a few firewall rules, no other packages.
Today, after some reading, I installed Country Block via the packages-web-interface.- No errors were shown in the install window;
- For testing I only checked China, and clicked on Commit Countries;
- I checked "Enable Country Block" and clicked on Save/Update;
- I clicked on the Apply Changes button that appears, but after the click, it won't disappear;
- At the bottom of the page I see:
Current Status = Running
You are blocking 3408 Networks
So far, all seems fine.
But after this I checked the system logs (partial copy):Sep 21 13:02:06 php: /pkg_mgr_install.php: Beginning package installation for Country Block.
Sep 21 13:02:07 check_reload_status: Syncing firewall
Sep 21 13:02:33 login: login on ttyu0 as root
Sep 21 13:02:33 check_reload_status: Syncing firewall
Sep 21 13:02:34 check_reload_status: Reloading filter
Sep 21 13:02:35 check_reload_status: Syncing firewall
Sep 21 13:02:41 root: Countryblock was found not running
Sep 21 13:02:43 php: : The command '/usr/local/pkg/pf/countryblock.sh start' returned exit code '1', the output was 'not running root: Countryblock was found not running Status: 404 Not Found Content-type: text/html No input file specified. 0 table deleted. 97 22 rm: /tmp/rules.debug.tmp: No such file or directory rm: /tmp/rules.debug.tmp: No such file or directory 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168'
Sep 21 13:04:28 php: /packages/countryblock/countryblock.php: The command 'rm -R /usr/local/www/packages/countryblock/lists' returned exit code '1', the output was 'rm: /usr/local/www/packages/countryblock/lists: No such file or directory'
Sep 21 13:04:29 php: /packages/countryblock/countryblock.php: The command 'rm errorOUT.txt' returned exit code '1', the output was 'rm: errorOUT.txt: No such file or directory'
Sep 21 13:05:48 check_reload_status: Reloading filter
Sep 21 13:05:53 php: /packages/countryblock/countryblock.php: The command 'rm lists/temp' returned exit code '1', the output was 'rm: lists/temp: No such file or directory'
Sep 21 13:05:57 check_reload_status: Reloading filter
Sep 21 13:05:59 root: Countryblock was found not runningThe last entry keeps appearing, even after I did the trick with the editing/saving of a random firewall rule
How can I tell the package is running? And what about the errors in the log file?
And, maybe a newbie question, I checked the log option in settings, but what does it log exactly and where?
-
The logs can be ignored. There is a lot of output that is a little confusing. You get a lot of errors because there are several different installs out there and the package is built for stability on multiple install types. Those errors are repeated because the firewall filter gets regenerated when a system change occurs, which can be very frequent depending on your setup, and countryblock runs its script to ensure it's running when this happens.
Basically if it says it's running and there are networks being blocked then it's working 100% because it queries that directly from the firewall rules.
-
It still doesn't seem as though Country Block is working - I have all the spam recommended countries enabled, but can't seem to find one that I can block… Any suggestions on a site to test? Running 2.0-RELEASE (i386) built on Tue Sep 13 17:28:43 EDT 2011.
I have tried to get both this and IP Blocklist to work... can't seem to get it going. The interface says they are running though. Thanks!Sep 21 09:05:39 root: Countryblock was found not running
Sep 21 09:05:34 root: IP-Blocklist was found not running
Sep 21 09:05:22 root: Countryblock was found not running
Sep 21 09:05:16 root: IP-Blocklist was found not running
Sep 21 09:05:11 php: /pkg_edit.php: Reloading Squid for configuration sync
Sep 21 09:05:11 check_reload_status: Reloading filter
Sep 21 09:05:11 check_reload_status: Syncing firewall
Sep 21 09:05:10 check_reload_status: Reloading filter
Sep 21 09:05:10 php: /pkg_edit.php: Reloading Squid for configuration sync
Sep 21 08:55:50 php: /packages/countryblock/countryblock.php: The command 'rm lists/temp' returned exit code '1', the output was 'rm: lists/temp: No such file or directory'
Sep 21 08:49:56 php: : The command '/usr/local/pkg/pf/countryblock.sh start' returned exit code '1', the output was 'not running root: Countryblock was found not running Status: 404 Not Found Content-type: text/html No input file specified. 0 table deleted. 134 19 rm: /tmp/rules.debug.tmp: No such file or directory rm: /tmp/rules.debug.tmp: No such file or directory 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189
Sep 21 08:49:45 root: Countryblock was found not running
Sep 21 08:49:40 root: IP-Blocklist was found not running
Sep 21 08:49:34 check_reload_status: Reloading filter
Sep 21 08:49:27 check_reload_status: Syncing firewall
Sep 21 08:49:26 php: /pkg_mgr_install.php: Beginning package installation for Country Block.
Sep 21 08:49:25 check_reload_status: Syncing firewall
Sep 21 08:47:26 check_reload_status: Syncing firewall
Sep 21 08:46:33 check_reload_status: Syncing firewall
Sep 21 08:46:33 php: /packages/ipblocklist/ipblocklist.php: The command 'rm errorOUT.txt' returned exit code '1', the output was 'rm: errorOUT.txt: No such file or directory'
Sep 21 08:46:33 php: /packages/ipblocklist/ipblocklist.php: The command 'rm -R /usr/local/www/packages/ipblocklist/lists' returned exit code '1', the output was 'rm: /usr/local/www/packages/ipblocklist/lists: No such file or directory'
Sep 21 08:46:33 php: /packages/ipblocklist/ipblocklist.php: The command 'ipfw -f flush' returned exit code '69', the output was 'ipfw: setsockopt(IP_FW_FLUSH): Protocol not available'
Sep 21 08:43:17 check_reload_status: Syncing firewall
Sep 21 08:43:17 php: /packages/ipblocklist/ipblocklist.php: The command 'ipfw -f flush' returned exit code '69', the output was 'ipfw: setsockopt(IP_FW_FLUSH): Protocol not available'
Sep 21 08:41:34 root: IP-Blocklist was found not running
Sep 21 08:41:28 check_reload_status: Syncing firewall
Sep 21 08:41:28 check_reload_status: Reloading filter
Sep 21 08:41:27 check_reload_status: Syncing firewall
Sep 21 08:39:48 check_reload_status: Syncing firewall
Sep 21 08:39:48 php: /pkg_mgr_install.php: Beginning package installation for IP-Blocklist. -
Are you blocking outbound traffic?
-
Are you blocking outbound traffic?
Yes, I tried this website and made sure it resolved to Russia and it still lets me go to it.
http://www.prodisney.ru/index.php?page=clones.phpMy system logs keep showing this.. and after saving settings I get the exit code message.
Sep 21 09:28:03 php: /packages/countryblock/countryblock.php: The command 'rm lists/temp' returned exit code '1', the output was 'rm: lists/temp: No such file or directory'
Sep 21 09:27:47 php: /packages/countryblock/countryblock.php: The command 'rm lists/temp' returned exit code '1', the output was 'rm: lists/temp: No such file or directory'
Sep 21 09:05:39 root: Countryblock was found not running
Sep 21 09:05:34 root: IP-Blocklist was found not running
Sep 21 09:05:22 root: Countryblock was found not running
Sep 21 09:05:16 root: IP-Blocklist was found not running -
Just tried the site again after saving and applying - squid isn't letting it come up now. I'm going to try a couple others.
194.226.127.34 - http://eng.kremlin.ru/ is blocked now.
203.199.104.241 - http://www.airindia.in is blocked… so maybe it is working...I'll keep testing. Thanks!
Update Since a little bit ago I'm getting these again...
Sep 21 10:09:45 php: /pkg_edit.php: Reloading Squid for configuration sync
Sep 21 10:09:45 check_reload_status: Reloading filter
Sep 21 10:09:45 check_reload_status: Syncing firewall
Sep 21 10:09:44 check_reload_status: Reloading filter
Sep 21 10:09:44 php: /pkg_edit.php: Reloading Squid for configuration sync
Sep 21 10:01:40 root: Countryblock was found not running
Sep 21 10:01:35 root: IP-Blocklist was found not running
Sep 21 10:01:23 root: Countryblock was found not running
Sep 21 10:01:17 root: IP-Blocklist was found not running
Sep 21 10:01:12 php: /pkg_edit.php: Reloading Squid for configuration sync
Sep 21 10:01:11 check_reload_status: Reloading filter
Sep 21 10:01:11 check_reload_status: Syncing firewall
Sep 21 10:01:11 check_reload_status: Reloading filter
Sep 21 10:01:11 php: /pkg_edit.php: Reloading Squid for configuration sync -
The way you have your system configured (addons or packages) is causing your filter to be re-generated. Countryblock only reacts to that event and restarts. What your seeing is the package responding to system events.
-
The way you have your system configured (addons or packages) is causing your filter to be re-generated. Countryblock only reacts to that event and restarts. What your seeing is the package responding to system events.
So you are saying that these kind of messages are normal to see and are not concerning? I'm just trying to make sure I don't put more effort than needed with troubleshooting. Thanks! :)
Sep 21 11:11:19 php: : The command '/usr/local/pkg/pf/countryblock.sh start' returned exit code '1', the output was 'not running root: Countryblock was found not running Status: 404 Not Found Content-type: text/html No input file specified. 1 table deleted. 134 19 rm: /tmp/rules.debug.tmp: No such file or directory rm: /tmp/rules.debug.tmp: No such file or directory 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189
Sep 21 11:11:19 root: Countryblock was found not running
Sep 21 11:11:19 php: : The command '/usr/local/pkg/pf/IP-Blocklist.sh start' returned exit code '1', the output was 'not running root: IP-Blocklist was found not running 0 table deleted. 1 table deleted. rm: /tmp/rules.debug.tmp: No such file or directory rm: /tmp/rules.debug.tmp: No such file or directory 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 20
Sep 21 11:11:19 root: IP-Blocklist was found not running
Sep 21 11:11:13 check_reload_status: Reloading filter
Sep 21 11:11:11 check_reload_status: Syncing firewall -
Just checked it again and it stopped running and is not even enabled anymore and I can get to sites again - I have this error above SAVE.
Current Status = NOT running
/tmp/rules.debug:119: cannot load "/usr/local/www/packages/ipblocklist/lists/ipfw.ipfw": No such file or directory
You are blocking 0 NetworksWhen I try to restart or enable and SAVE the message comes up again and the enable box is deselected.
-
The logs can be ignored. There is a lot of output that is a little confusing. You get a lot of errors because there are several different installs out there and the package is built for stability on multiple install types. Those errors are repeated because the firewall filter gets regenerated when a system change occurs, which can be very frequent depending on your setup, and countryblock runs its script to ensure it's running when this happens.
Basically if it says it's running and there are networks being blocked then it's working 100% because it queries that directly from the firewall rules.
Ok, thanks. I will 'ignore' the entries in the system log and look at the package page for its status.
-
Countryblock Version 2.4 released!
-
Country selection is saved on system to ease updates
-
Corrected issues with uninstall
-
Removed Email
-
Widget is now available for pfsense 2.0
-
-
Countryblock Version 2.4 released!
-
Country selection is saved on system to ease updates
-
Corrected issues with uninstall
-
Removed Email
-
Widget is now available for pfsense 2.0
Thanks! I updated the package (by using the pkg button in the Installed Packages menu). Seems to work fine for now.
Can you tell me more about the Widget? I'm running 2.0 Release, but I can't find the widget in the "add-list" in the dashboard…
-
-
If you did a re-install from the menu then you will need to uninstall and re-install. That may be why you don't have the widget.
FYI everyone: The re-install package button does not work for a reason. You will need to uninstall and re-install.
-
Thanks, the widget is working now!
-
Does this plugin makes any sense on a pfsense installation with no inbound WAN rules?
When everything incoming is being blocked, does this package add something?
Does it work outbound?And secondly, where can i find the logs for this package, Enable logging is checked?
-
@D0X:
Does this plugin makes any sense on a pfsense installation with no inbound WAN rules?
When everything incoming is being blocked, does this package add something?
Does it work outbound?And secondly, where can i find the logs for this package, Enable logging is checked?
This questions have been answered many time in this topic. Please search next time.
It does make sense. You can't prevent a DDoS/DoS attack even if you block all incoming. What about port scans, or any unwanted traffic? This does that.
It does block outbound. Logs are stored in the firewall logs.There are 2 billion users connected to the Internet - China is the leader and U.S. is second
There are 2015 more devices connected than people
There are 260 billion Facebook views per month
There are 68,000 hacker tools on the web
Botnet sends out 69 billion messages every day
Samsung smart phones were shipped with malware
U.S. customs confiscated 5.6 million fake chips
Social networking exploitation is expected to take over email exploitation
There are 50 billion devices online - 2 trillion GB of data
There is an average of 10 million lines of code in the average car coming off the assembly line
There are 25 million apps
There are millions of malicious web sites every year - 95% of threats comes from web sites
Attacks have moved down from the application layer to the BIOS and CPU layer
There are 2000 new root kits per da
MacAfee labs get about 200,000 malicious codes to review every day
There are about 65 million malware out in the wild (Mobile malware, Botnet infections, and new malware every sites per day)
We are 95% unprotected - Security is not being built into apps etc.Counutryblock gives you that much more power to help secure your network even more. Turn that 95% unprotected into 30% unprotected.