• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

PfBlockerNG

Scheduled Pinned Locked Moved pfBlockerNG
1.2k Posts 210 Posters 1.8m Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • J
    justsomeone
    last edited by Jan 27, 2015, 7:58 AM

    I love this package, it helps me sleep at night!  ;D

    "Bad shit happens to drunk people."

    1 Reply Last reply Reply Quote 0
    • T
      Topper727
      last edited by Jan 27, 2015, 9:34 AM

      I see it in the pkgconfig on github. So I guess be in here soon? or is it already?

      https://github.com/pfsense/pfsense-packages/blob/master/pkg_config.10.xml

      Dell 2950 g3 server
      Intel(R) Xeon(R) CPU E5430 @ 2.66GHz
      Current: 2000 MHz, Max: 2667 MHz
      8 CPUs: 2 package(s) x 4 core(s)
      8152 MiB and 600meg 10k drive
      Pfsense 2.4 .. Hoping to get the phpvirtualbox going again.

      1 Reply Last reply Reply Quote 0
      • D
        doktornotor Banned
        last edited by Jan 27, 2015, 10:17 AM

        @Topper727:

        I see it in the pkgconfig on github. So I guess be in here soon? or is it already?

        Been there for a month. Not really useful with

        <required_version>3.0</required_version>
        
        1 Reply Last reply Reply Quote 0
        • S
          Supermule Banned
          last edited by Jan 27, 2015, 10:25 AM

          Seems to take quite some time to implement into pfsense package repository… not good!

          1 Reply Last reply Reply Quote 0
          • F
            fragged
            last edited by Jan 27, 2015, 11:56 AM

            @Supermule:

            Seems to take quite some time to implement into pfsense package repository… not good!

            It's already there, but it's being tested by ESF before it's released for the public. doktornotor's post above shows the reason why it's not showing up on 2.1.5 or 2.2 :)

            1 Reply Last reply Reply Quote 0
            • D
              doktornotor Banned
              last edited by Jan 27, 2015, 12:04 PM

              @fragged:

              why it's not showing up on 2.1.5 or 2.2 :)

              Maybe it could with a bit of unsupported fiddling with /etc/version :P

              1 Reply Last reply Reply Quote 0
              • F
                fragged
                last edited by Jan 27, 2015, 12:22 PM

                @doktornotor:

                @fragged:

                why it's not showing up on 2.1.5 or 2.2 :)

                Maybe it could with a bit of unsupported fiddling with /etc/version :P

                I knew there's a way to fool the system, but didn't know the right place :)

                1 Reply Last reply Reply Quote 0
                • D
                  doktornotor Banned
                  last edited by Jan 27, 2015, 12:26 PM

                  Note: If someone does this, I'd suggest revert the change immediately after the package is installed.

                  1 Reply Last reply Reply Quote 0
                  • M
                    Mr. Jingles
                    last edited by Jan 27, 2015, 12:42 PM

                    @Supermule:

                    Seems to take quite some time to implement into pfsense package repository… not good!

                    I think I will wipe the dirt from my other diploma, that from law school, and speak in defense of ( ;D ):

                    The Pfsense team has worked hard on 2.2; I'm sure that took, and still takes, almost all of their time.

                    't Makes (pf)sense to me that other work gets delayed with relatively limited resources.

                    6 and a half billion people know that they are stupid, agressive, lower life forms.

                    1 Reply Last reply Reply Quote 0
                    • M
                      Mr. Jingles
                      last edited by Jan 27, 2015, 12:46 PM

                      @doktornotor:

                      @fragged:

                      why it's not showing up on 2.1.5 or 2.2 :)

                      Maybe it could with a bit of unsupported fiddling with /etc/version :P

                      Don't you all appreciate that multiple sets of eyes look at code before it gets released for your perimeter security appliance  :) ?

                      I appreciate that procedure, and I'm sure BB does too, as perhaps the pfSense team notices things BB overlooked (that happens: when you look too much at something, you develop a sort of 'blindness' for things. I'm sure BB looked alot at the code  ;D . I suffer from the same: in the end, after looking at Excel sheets for 10 hours, you don't see anything anymore.)

                      6 and a half billion people know that they are stupid, agressive, lower life forms.

                      1 Reply Last reply Reply Quote 0
                      • D
                        doktornotor Banned
                        last edited by Jan 27, 2015, 1:00 PM Jan 27, 2015, 12:57 PM

                        @Mr.:

                        Don't you all appreciate that multiple sets of eyes look at code before it gets released for your perimeter security appliance  :) ?

                        Pretty confident the package is working a whole LOT better compared to the old pfBlocker thing (which, ATM, is not really usable with 2.2 any more depending on which blocklists you happen to use, plus the rest of features - the country etc. blocklists - being desperately outdated and useless.)

                        1 Reply Last reply Reply Quote 0
                        • B
                          Bummer
                          last edited by Jan 27, 2015, 1:25 PM

                          I'm really looking forward to this new release! I love pfBlocker and these upgrades are exactly what are needed. I can hardly wait!

                          1 Reply Last reply Reply Quote 0
                          • M
                            marcelloc
                            last edited by Jan 28, 2015, 3:35 AM Jan 27, 2015, 2:27 PM

                            If you want to test pfBlockerNG on 2.2,

                            create this patch using systempatches package.

                            
                            --- pkg-utils.orig.inc       2015-01-27 14:27:38.000000000 +0000
                            +++ pkg-utils.inc      2015-01-27 14:27:50.000000000 +0000
                            @@ -624,6 +624,7 @@
                                            if (isset($pkg_info['maximum_version']))
                                                    $compatible = $compatible && (pfs_version_compare("", $version, $pkg_info['maximum_version']) <= 0);
                            
                            +               $compatible = true;
                                            if (!$compatible) {
                                                    log_error(sprintf(gettext('Package %s is not supported on this version.'), $pkg_info['name']));
                                                    $static_output .= sprintf(gettext("Package %s is not supported on this version."), $pkg_info['name']);
                            
                            

                            Note: Do not forget to click test and apply the patch after creating/saving  it.  ;)

                            then install package with your pfsense url

                            https://YOUR_PFSENSE_ADDRESS_HERE/pkg_mgr_install.php?id=pfBlockerNG
                            

                            And of cource, DO AT YOUR OWN RISK  :)

                            pfblockerng_install_patch.png
                            pfblockerng_install_patch.png_thumb
                            pfblockerng_install.png
                            pfblockerng_install.png_thumb

                            Treinamentos de Elite: http://sys-squad.com

                            Help a community developer! ;D

                            1 Reply Last reply Reply Quote 0
                            • B
                              Bummer
                              last edited by Jan 27, 2015, 2:41 PM

                              Your instructions are great, they're for dummies like me.

                              It's greatly appreciated! I'm going to try and hit the datacenter this weekend. I'm doing a fresh install and moving from 2.1.5 (32bit) to 2.2 (64bit). I'll try installing pfBlockerNG then.

                              Thank you!

                              1 Reply Last reply Reply Quote 0
                              • M
                                marian78
                                last edited by Jan 27, 2015, 4:16 PM

                                is it  compatible with 32bit version?

                                Snímka.JPG
                                Snímka.JPG_thumb

                                pfsense runing in virtual, on HP N54L microserver, 2G RAM, 60G disk, WAN, LAN, DMZ, Wifi, OpenVPN server + client, suricata, pfblocker

                                1 Reply Last reply Reply Quote 0
                                • D
                                  doktornotor Banned
                                  last edited by Jan 27, 2015, 4:17 PM

                                  The package? Sure. The pkg-utils.inc patch? No idea, never tried.

                                  1 Reply Last reply Reply Quote 0
                                  • M
                                    marian78
                                    last edited by Jan 27, 2015, 4:20 PM

                                    i try install pfblockerng on 32bit pfsense with this patch and it failed.

                                    pfsense runing in virtual, on HP N54L microserver, 2G RAM, 60G disk, WAN, LAN, DMZ, Wifi, OpenVPN server + client, suricata, pfblocker

                                    1 Reply Last reply Reply Quote 0
                                    • C
                                      Cino
                                      last edited by Jan 27, 2015, 4:37 PM Jan 27, 2015, 4:29 PM

                                      Edit: They aren't built for 2.1.5. Only for 2.2

                                      http://files.pfsense.org/packages/10/All/

                                      
                                      pfblockerng-1.6.3_1-amd64.pbi                      27-Nov-2014 13:15             2743546
                                      pfblockerng-1.6.3_1-amd64.pbi.sha256               27-Nov-2014 13:15                  65
                                      pfblockerng-1.6.3_1-i386.pbi                       27-Nov-2014 13:23             2909780
                                      pfblockerng-1.6.3_1-i386.pbi.sha256                27-Nov-2014 13:23                  65
                                      
                                      

                                      i dont see anything in http://files.pfsense.org/packages/8/All/ for 2.1.5

                                      1 Reply Last reply Reply Quote 0
                                      • M
                                        marian78
                                        last edited by Jan 27, 2015, 4:30 PM

                                        ok, thx. this make sense to me.

                                        pfsense runing in virtual, on HP N54L microserver, 2G RAM, 60G disk, WAN, LAN, DMZ, Wifi, OpenVPN server + client, suricata, pfblocker

                                        1 Reply Last reply Reply Quote 0
                                        • D
                                          doktornotor Banned
                                          last edited by Jan 27, 2015, 4:39 PM

                                          @Cino:

                                          I dont believe the pbi's are built for 32bit yet

                                          They certainly are, see https://files.pfsense.org/packages/10/All/

                                          Looking at the pkg-utils.inc file, you'd rather need $force_install = true; at proper place instead.

                                          1 Reply Last reply Reply Quote 0
                                          48 out of 1196
                                          • First post
                                            48/1196
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                            This community forum collects and processes your personal information.
                                            consent.not_received