PfBlockerNG

fragged · Jan 30, 2015, 4:38 PM

@samham:

I have the package installed and configured but it doesn't seemto be working. I have PFblocker installed but the I checked the box to disable checking, any suggestions?

Looks like you have no list enabled ???

Or downloaded (?). I believe the new package doesn't download lists every time you click save on the edit/add list page.

marcelloc · Jan 30, 2015, 4:41 PM

Did you applied(force update) after selecting countries for example?

samham · Jan 30, 2015, 5:58 PM

many thanks marcelloc that did it.

messerchmidt · Jan 30, 2015, 9:11 PM

is this available to the public yet?

BBcan177 · Jan 30, 2015, 9:19 PM

@fragged:

I believe the new package doesn't download lists every time you click save on the edit/add list page.

Yes this is 'by Design'. The process is single threaded, to ensure that only one process at a time updates the files. Allowing the possibility of pressing "Save" at the same time as "Cron" is running or expected to run, can cause data corruption. So when you press "save" it will just save the settings.

The "Update" tab has a "Force Update" icon which will disable the Cron event and execute the download process. If Cron is active, it will not let you bypass that event, until its completed. You are able to see the complete Download process in the Update Window.

Any errors will be recorded there, so debugging is fairly straight forward.

You are also able to view the pfblockerng.log and error.log in the Log Browser Tab.

marcelloc · Jan 30, 2015, 9:20 PM

Pull request sent :)

BBcan177 · Jan 31, 2015, 5:26 AM

For those of you that followed the bypass to install the Package, please follow these suggestions:

Enable "Keep Settings" in the pfBlockerNG General Tab. On a Re-install, the first step is a De-Install of the package. So without enabling this setting, you will lose all configured settings on a "Re-Install".

So please ensure that this is "Checked". You will need to hit "Save" to have it apply!!

There is a v1.0 of pfBlockerNG Posted with a minor revision for an IBlock issue. I believe you will need to ensure that the bypass method used on the first Install, is activated before proceeding with the Update or the Re-Install will FAIL.

Please ensure you Backup as always before proceeding with any Updates.

samham · Jan 31, 2015, 5:30 AM

I don't see the package listed yet!!!

BBcan177 · Jan 31, 2015, 5:32 AM

@samham:

I don't see the package listed yet!!!

Its not Official Yet.. I was referring to those Users who followed the Bypass methods in this thread to get it Installed.

samham · Jan 31, 2015, 5:34 AM

marcelloc sent a pull request, I'm assuming it should be official shortly

Topper727 · Jan 31, 2015, 9:14 AM

I seen it in packages today. Got the update from it.

digdug3 · Jan 31, 2015, 10:30 AM

@BBCan:

Thanks for mailing me I was (almost) missing all the fun ;)
The package really needs to be released officially!

Great marcelloc pointed out the old pfblocker is now obsolete and should be replaced with pfBlockerNG.

JasonJoel · Jan 31, 2015, 1:17 PM

Not in my package list yet (just the old blocker package). Looking forward to it though!!

@Topper727:

I seen it in packages today. Got the update from it.

wcrowder · Jan 31, 2015, 3:54 PM

See:
https://forum.pfsense.org/index.php?topic=86212.msg481358#msg481358

Make sure you read this entire thread.

@JasonJoel:

Not in my package list yet (just the old blocker package). Looking forward to it though!!

@Topper727:

I seen it in packages today. Got the update from it.

reggie14 · Jan 31, 2015, 6:07 PM

@wcrowder:

See:
https://forum.pfsense.org/index.php?topic=86212.msg481358#msg481358

Make sure you read this entire thread.

I'm confused. Doesn't this post indicate that the package is being officially released now, and that we won't have to do anything special to download it?

marcelloc · Jan 31, 2015, 6:10 PM

The pull request needs to be merged by pfsense team before you can use it without any hacks.

Bummer · Jan 31, 2015, 6:11 PM

Ha, ha, ha… I was wondering the same thing too!

bfeitell · Jan 31, 2015, 8:29 PM

I used the patch method to install pfBlockerNG, and it was working well on two machines until a reboot. After a reboot the country block lists in /var/db/aliastables/ are all empty but for a single entry of 1.1.1.1.

Forcing an update does not fetch the correct files, and no blocking is taking place.

BBcan177 · Jan 31, 2015, 8:41 PM

@bfeitell:

I used the patch method to install pfBlockerNG, and it was working well on two machines until a reboot.

Is this a Nano install where the /var folder is getting deleted on reboot?

This is a question I have asked the Devs to find a solution for… As these files should be stored in the /var folder. The previous pfBlocker package used to store the files in the /usr/local folder. This issue is only limited to Nano and Ramdisk type installs.

Run the following shell command to Re-Download the Maxmind Database, and restore the Country code files in the /var folder.

php /usr/local/www/pfblockerng/pfblockerng.php dc

Following that, execute a "Force Update"

marcelloc · Jan 31, 2015, 8:41 PM

@BBcan177:

Is this a Nano install where the /var folder is getting deleted on reboot?

I guess so.

You may need a conf mount rw to backup data on package save.

I found a long time ago a guide to run nanobsd on virtual machine. This way will be easier to debug cf installs.