Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IP-Blocklist

    Scheduled Pinned Locked Moved pfSense Packages
    496 Posts 86 Posters 557.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • Q
      Quinn1981
      last edited by

      http://forum.pfsense.org/index.php/topic,41115.0.html Made a discussion there. I've given up for now. Also, after playing around with IPB, it still stop working and not be blocking anything. It typically happens from too much add and removing of whitelist files. Eventually, a purge will not work to remove the file(s). It seems quite buggy in this respect. Otherwise, it works as intended.

      1 Reply Last reply Reply Quote 0
      • RonpfSR
        RonpfS
        last edited by

        I installed the IP Blocklist package and it seems that perl is not installed

        I tried to install perl:

        pkg_add -r perl
        Error: Unable to get ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-8.1-release/Latest/perl.tbz: File unavailable (e.g., file not found, no access)

        It looks like the 'packages-8.1-release' folder is missing

        However, I installed ntop, it require and install perl http://files.pfsense.org/packages/8/All/perl-5.12.3.tbz

        Now IP Blocklist works fine  ::)

        2.4.5-RELEASE-p1 (amd64)
        Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
        Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

        1 Reply Last reply Reply Quote 0
        • RonpfSR
          RonpfS
          last edited by

          The configuration is not saved when you use Diagnostics: Backup/restore
          not a big deal, you just reconfigure when you migrate from on computer to another.

          2.4.5-RELEASE-p1 (amd64)
          Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
          Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

          1 Reply Last reply Reply Quote 0
          • K
            killervette
            last edited by

            Cant get it to work

            Sep 30 23:23:39 php: /packages/ipblocklist/ipblocklist.php: The command 'ipfw -f flush' returned exit code '69', the output was 'ipfw: setsockopt(IP_FW_FLUSH): Protocol not available'
            Sep 30 23:23:39 php: : The command '/usr/local/pkg/pf/IP-Blocklist.sh start' returned exit code '1', the output was 'not running root: IP-Blocklist was found not running 0 table deleted. 0 table deleted. rm: /tmp/rules.debug.tmp: No such file or directory rm: /tmp/rules.debug.tmp: No such file or directory 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131'

            1 Reply Last reply Reply Quote 0
            • T
              tommyboy180
              last edited by

              I wonder if you're having the same issue as above where perl isn't installed. Can you find out if you have perl installed please?

              -Tom Schaefer
              SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

              Please support pfBlocker | File Browser | Strikeback

              1 Reply Last reply Reply Quote 0
              • K
                killervette
                last edited by

                What is the easiest way to do that? What should I typein shell?

                1 Reply Last reply Reply Quote 0
                • T
                  tommyboy180
                  last edited by 

                  perl -v

                  -Tom Schaefer
                  SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                  Please support pfBlocker | File Browser | Strikeback

                  1 Reply Last reply Reply Quote 0
                  • K
                    killervette
                    last edited by

                    perl says command not found, so its not installed.  do I just do apt-get?

                    1 Reply Last reply Reply Quote 0
                    • K
                      killervette
                      last edited by

                      reply, so i installed ntop also which had perl.  Ip blocklist still will not block any networks. i am waiting for the error log to update with the messages

                      1 Reply Last reply Reply Quote 0
                      • T
                        tommyboy180
                        last edited by

                        Please run these commands if you're having issues running IPBlocklist

                        setenv PACKAGESITE "ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-8-stable/Latest/"

                        pkg_add -r perl

                        pkg_add -r p5-NET-CIDR

                        rehash

                        This should fix your issue

                        -Tom Schaefer
                        SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                        Please support pfBlocker | File Browser | Strikeback

                        1 Reply Last reply Reply Quote 0
                        • K
                          killervette
                          last edited by

                          php: /packages/ipblocklist/ipblocklist.php: The command 'ipfw -f flush' returned exit code '69', the output was 'ipfw: setsockopt(IP_FW_FLUSH): Protocol not available'

                          does it matter if i use country block too?

                          1 Reply Last reply Reply Quote 0
                          • T
                            tommyboy180
                            last edited by

                            We you able to get it running after you ran those commands?

                            -Tom Schaefer
                            SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                            Please support pfBlocker | File Browser | Strikeback

                            1 Reply Last reply Reply Quote 0
                            • K
                              killervette
                              last edited by

                              It says running, but blocking 0 networks no matter how many lists I add

                              Also, this is in my log

                              Oct 1 21:34:35 root: IP-Blocklist was found not running

                              1 Reply Last reply Reply Quote 0
                              • T
                                tommyboy180
                                last edited by

                                Can you run```
                                pkg_info

                                -Tom Schaefer
                                SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                Please support pfBlocker | File Browser | Strikeback

                                1 Reply Last reply Reply Quote 0
                                • RonpfSR
                                  RonpfS
                                  last edited by

                                  My installation was working
                                  but to be on the safe side I did the following

                                  
$ pkg_info
GeoIP-1.4.8_1       Find the country that any IP address or hostname originates
bsdinstaller-2.0.2011.0913 BSD Installer mega-package
expat-2.0.1_1       XML 1.0 parser written in C
font-util-1.2.0     Create an index of X font files in a directory
fontconfig-2.8.0,1  An XML-based font configuration API for X Windows
fontconfig-2.8.0_1,1 An XML-based font configuration API for X Windows
freetype2-2.4.3     A free and portable TrueType font rendering engine
freetype2-2.4.4     A free and portable TrueType font rendering engine
gd-2.0.35_7,1       A graphics library for fast creation of images
gdbm-1.8.3_3        The GNU database manager
gettext-0.18.1.1    GNU gettext package
graphviz-2.28.0     Graph Visualization Software from AT&T and Bell Labs
grub-0.97_4         GRand Unified Bootloader
jpeg-8_3            IJG's jpeg compression utilities
libart_lgpl-2.3.21,1 Library for high-performance 2D graphics
libevent-1.4.14b_2  Provides an API to execute callback functions on certain ev
libiconv-1.13.1_1   A character set conversion library
libltdl-2.4         System independent dlopen wrapper
libxml2-2.7.8_1     XML parser library for GNOME
ntop-4.0.1_1        Network monitoring tool with command line and web interface
perl-5.12.3         Practical Extraction and Report Language
pkg-config-0.25_1   A utility to retrieve information about installed libraries
png-1.4.4           Library for manipulating PNG images
png-1.4.5_1         Library for manipulating PNG images
python27-2.7.2_1    An interpreted object-oriented programming language
rrdtool-1.2.26_1    Round Robin Database Tools
urwfonts-1.0_3      Another font package for X
webfonts-0.30_6     TrueType core fonts for the Web

pkg_add ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-8-stable/Latest/perl.tbz

pkg_add ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-8-stable/Latest/p5-Net-CIDR.tbz

pkg_info
GeoIP-1.4.8_1       Find the country that any IP address or hostname originates
bsdinstaller-2.0.2011.0913 BSD Installer mega-package
expat-2.0.1_1       XML 1.0 parser written in C
font-util-1.2.0     Create an index of X font files in a directory
fontconfig-2.8.0,1  An XML-based font configuration API for X Windows
fontconfig-2.8.0_1,1 An XML-based font configuration API for X Windows
freetype2-2.4.3     A free and portable TrueType font rendering engine
freetype2-2.4.4     A free and portable TrueType font rendering engine
gd-2.0.35_7,1       A graphics library for fast creation of images
gdbm-1.8.3_3        The GNU database manager
gettext-0.18.1.1    GNU gettext package
graphviz-2.28.0     Graph Visualization Software from AT&T and Bell Labs
grub-0.97_4         GRand Unified Bootloader
jpeg-8_3            IJG's jpeg compression utilities
libart_lgpl-2.3.21,1 Library for high-performance 2D graphics
libevent-1.4.14b_2  Provides an API to execute callback functions on certain ev
libiconv-1.13.1_1   A character set conversion library
libltdl-2.4         System independent dlopen wrapper
libxml2-2.7.8_1     XML parser library for GNOME
ntop-4.0.1_1        Network monitoring tool with command line and web interface
p5-Net-CIDR-0.14    Perl module to manipulate IPv4/IPv6 netblocks in CIDR notat
perl-5.12.3         Practical Extraction and Report Language
pkg-config-0.25_1   A utility to retrieve information about installed libraries
png-1.4.4           Library for manipulating PNG images
png-1.4.5_1         Library for manipulating PNG images
python27-2.7.2_1    An interpreted object-oriented programming language
rrdtool-1.2.26_1    Round Robin Database Tools
urwfonts-1.0_3      Another font package for X
webfonts-0.30_6     TrueType core fonts for the Web

                                  Now I get 0 blocked ….  ???

                                  php: /packages/ipblocklist/ipblocklist.php: The command 'ipfw -f flush' returned exit code '69', the output was 'ipfw: setsockopt(IP_FW_FLUSH): Protocol not available'

                                  so I

                                  pkg_delete p5-Net-CIDR-0.14
                                  pkg remove ipblock
                                  pkg remove ntop

                                  pkg add ntop
                                  pkg add ipblock

                                  redo the list

                                  now I get 3615 blocked

                                  ::)

                                  2.4.5-RELEASE-p1 (amd64)
                                  Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
                                  Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

                                  1 Reply Last reply Reply Quote 0
                                  • K
                                    killervette
                                    last edited by

                                    I did the above and still no go

                                    php: : The command '/usr/local/pkg/pf/IP-Blocklist.sh start' returned exit code '2', the output was 'not running root: IP-Blocklist was found not running 0 table deleted. 0 table deleted. rm: /tmp/rules.debug.tmp: No such file or directory /usr/local/pkg/pf/IP-Blocklist.sh: cannot create /usr/local/www/packages/ipblocklist/errorOUT.txt: No such file or directory rm: /tmp/rules.debug.tmp: No such file or directory 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 cat: /usr/local/www/packages/ipblocklist/interfaces.txt: No such file or directory 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 rm: /u

                                    pkg_info is as follows:

                                    GeoIP-1.4.8_1      Find the country that any IP address or hostname originates
                                    bsdinstaller-2.0.2011.0913 BSD Installer mega-package
                                    expat-2.0.1_1      XML 1.0 parser written in C
                                    font-util-1.2.0    Create an index of X font files in a directory
                                    fontconfig-2.8.0,1  An XML-based font configuration API for X Windows
                                    fontconfig-2.8.0_1,1 An XML-based font configuration API for X Windows
                                    freetype2-2.4.3    A free and portable TrueType font rendering engine
                                    freetype2-2.4.4    A free and portable TrueType font rendering engine
                                    gd-2.0.35_7,1      A graphics library for fast creation of images
                                    gdbm-1.8.3_3        The GNU database manager
                                    gettext-0.18.1.1    GNU gettext package
                                    graphviz-2.28.0    Graph Visualization Software from AT&T and Bell Labs
                                    grub-0.97_4        GRand Unified Bootloader
                                    jpeg-8_3            IJG's jpeg compression utilities
                                    libart_lgpl-2.3.21,1 Library for high-performance 2D graphics
                                    libevent-1.4.14b_2  Provides an API to execute callback functions on certain ev
                                    libiconv-1.13.1_1  A character set conversion library
                                    libltdl-2.4        System independent dlopen wrapper
                                    libpcap-1.1.1_1    Ubiquitous network traffic capture library
                                    libxml2-2.7.8_1    XML parser library for GNOME
                                    ntop-4.0.1_1        Network monitoring tool with command line and web interface
                                    perl-5.12.3        Practical Extraction and Report Language
                                    pkg-config-0.25_1  A utility to retrieve information about installed libraries
                                    png-1.4.4          Library for manipulating PNG images
                                    png-1.4.5_1        Library for manipulating PNG images
                                    python27-2.7.2_1    An interpreted object-oriented programming language
                                    rrdtool-1.2.26_1    Round Robin Database Tools
                                    urwfonts-1.0_3      Another font package for X
                                    webfonts-0.30_6    TrueType core fonts for the Web

                                    1 Reply Last reply Reply Quote 0
                                    • K
                                      killervette
                                      last edited by

                                      update…i added two different lists.  I think the second one worked.  The first one showed no networks blocked.  When I added the second one it shows 34xx networks blocked.  Is it something to do with the way iblocklist fowards to a different URL???

                                      http://list.iblocklist.com/?list=bt_proxy&fileformat=p2p&archiveformat=gz
                                      http://iblocklist.dbnservers.net/files/wujnnzxrgppvpdujdetm/bt_ads.gz

                                      1 Reply Last reply Reply Quote 0
                                      • T
                                        tommyboy180
                                        last edited by

                                        I don't see p5-net-cidr in your lists of packages. That package is required by ipblocklist.

                                        -Tom Schaefer
                                        SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                        Please support pfBlocker | File Browser | Strikeback

                                        1 Reply Last reply Reply Quote 0
                                        • K
                                          killervette
                                          last edited by

                                          @tommyboy180:

                                          I don't see p5-net-cidr in your lists of packages. That package is required by ipblocklist.

                                          It's there now. All seems to be working now. Thanks alot

                                          1 Reply Last reply Reply Quote 0
                                          • RonpfSR
                                            RonpfS
                                            last edited by

                                            Update on my setup

                                            
$ setenv PACKAGESITE "ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-8-stable/Latest/"

$ pkg_add -r p5-Net-CIDR
Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-8-stable/Latest/p5-Net-CIDR.tbz... Done.
pkg_add: warning: package 'p5-Net-CIDR-0.14' requires 'perl-5.12.4_2', but 'perl-5.12.3' is installed

$ pkg_add -r perl
Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-8-stable/Latest/perl.tbz... Done.
pkg_add: package 'perl-5.12.4_2' or its older version already installed

$ pkg_info
GeoIP-1.4.8_1       Find the country that any IP address or hostname originates
bsdinstaller-2.0.2011.0913 BSD Installer mega-package
expat-2.0.1_1       XML 1.0 parser written in C
font-util-1.2.0     Create an index of X font files in a directory
fontconfig-2.8.0,1  An XML-based font configuration API for X Windows
fontconfig-2.8.0_1,1 An XML-based font configuration API for X Windows
freetype2-2.4.3     A free and portable TrueType font rendering engine
freetype2-2.4.4     A free and portable TrueType font rendering engine
gd-2.0.35_7,1       A graphics library for fast creation of images
gdbm-1.8.3_3        The GNU database manager
gettext-0.18.1.1    GNU gettext package
graphviz-2.28.0     Graph Visualization Software from AT&T and Bell Labs
grub-0.97_4         GRand Unified Bootloader
jpeg-8_3            IJG's jpeg compression utilities
libart_lgpl-2.3.21,1 Library for high-performance 2D graphics
libevent-1.4.14b_2  Provides an API to execute callback functions on certain ev
libiconv-1.13.1_1   A character set conversion library
libltdl-2.4         System independent dlopen wrapper
libpcap-1.1.1_1     Ubiquitous network traffic capture library
libxml2-2.7.8_1     XML parser library for GNOME
ntop-4.0.1_1        Network monitoring tool with command line and web interface
p5-Net-CIDR-0.14    Perl module to manipulate IPv4/IPv6 netblocks in CIDR notat
perl-5.12.3         Practical Extraction and Report Language
pkg-config-0.25_1   A utility to retrieve information about installed libraries
png-1.4.4           Library for manipulating PNG images
png-1.4.5_1         Library for manipulating PNG images
python27-2.7.2_1    An interpreted object-oriented programming language
rrdtool-1.2.26_1    Round Robin Database Tools
urwfonts-1.0_3      Another font package for X
webfonts-0.30_6     TrueType core fonts for the Web

                                            So I reverted back again
                                            removed p5-Net-CIDR-0.14, IP-blocklist, ntop

                                            installed perl, p5-Net-CIDR

                                            
$ pkg_info
bsdinstaller-2.0.2011.0913 BSD Installer mega-package
gettext-0.18.1.1    GNU gettext package
grub-0.97_4         GRand Unified Bootloader
jpeg-8_3            IJG's jpeg compression utilities
libiconv-1.13.1_1   A character set conversion library

$ pkg_add -r perl
Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-8-stable/Latest/perl.tbz... Done.
Removing stale symlinks from /usr/bin...
    Skipping /usr/bin/perl
    Skipping /usr/bin/perl5
Done.
Creating various symlinks in /usr/bin...
    Symlinking /usr/local/bin/perl5.12.4 to /usr/bin/perl
    Symlinking /usr/local/bin/perl5.12.4 to /usr/bin/perl5
Done.
cd: can't cd to /usr/include
Cleaning up /etc/make.conf... Done.
Spamming /etc/make.conf... Done.

$ pkg_info
bsdinstaller-2.0.2011.0913 BSD Installer mega-package
gettext-0.18.1.1    GNU gettext package
grub-0.97_4         GRand Unified Bootloader
jpeg-8_3            IJG's jpeg compression utilities
libiconv-1.13.1_1   A character set conversion library
perl-5.12.4_2       Practical Extraction and Report Language

$ pkg_add -r p5-Net-CIDR
Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-8-stable/Latest/p5-Net-CIDR.tbz... Done.

$ pkg_info
bsdinstaller-2.0.2011.0913 BSD Installer mega-package
gettext-0.18.1.1    GNU gettext package
grub-0.97_4         GRand Unified Bootloader
jpeg-8_3            IJG's jpeg compression utilities
libiconv-1.13.1_1   A character set conversion library
p5-Net-CIDR-0.14    Perl module to manipulate IPv4/IPv6 netblocks in CIDR notat
perl-5.12.4_2       Practical Extraction and Report Language

                                            install ntop than IP-Blocklist

                                            everything works fine now

                                            
$ pkg_info                             
GeoIP-1.4.8_1       Find the country that any IP address or hostname originates
bsdinstaller-2.0.2011.0913 BSD Installer mega-package
expat-2.0.1_1       XML 1.0 parser written in C
font-util-1.2.0     Create an index of X font files in a directory
fontconfig-2.8.0,1  An XML-based font configuration API for X Windows
fontconfig-2.8.0_1,1 An XML-based font configuration API for X Windows
freetype2-2.4.3     A free and portable TrueType font rendering engine
freetype2-2.4.4     A free and portable TrueType font rendering engine
gd-2.0.35_7,1       A graphics library for fast creation of images
gdbm-1.8.3_3        The GNU database manager
gettext-0.18.1.1    GNU gettext package
graphviz-2.28.0     Graph Visualization Software from AT&T and Bell Labs
grub-0.97_4         GRand Unified Bootloader
jpeg-8_3            IJG's jpeg compression utilities
libart_lgpl-2.3.21,1 Library for high-performance 2D graphics
libevent-1.4.14b_2  Provides an API to execute callback functions on certain ev
libiconv-1.13.1_1   A character set conversion library
libltdl-2.4         System independent dlopen wrapper
libpcap-1.1.1_1     Ubiquitous network traffic capture library
libxml2-2.7.8_1     XML parser library for GNOME
ntop-4.0.1_1        Network monitoring tool with command line and web interface
p5-Net-CIDR-0.14    Perl module to manipulate IPv4/IPv6 netblocks in CIDR notat
perl-5.12.3         Practical Extraction and Report Language
perl-5.12.4_2       Practical Extraction and Report Language
pkg-config-0.25_1   A utility to retrieve information about installed libraries
png-1.4.4           Library for manipulating PNG images
png-1.4.5_1         Library for manipulating PNG images
python27-2.7.2_1    An interpreted object-oriented programming language
rrdtool-1.2.26_1    Round Robin Database Tools
urwfonts-1.0_3      Another font package for X
webfonts-0.30_6     TrueType core fonts for the Web

                                            2.4.5-RELEASE-p1 (amd64)
                                            Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
                                            Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.