PFBlockerNG 2.1.1_2 not updating tables

digdug3 · Aug 13, 2016, 11:16 AM

PFBlockerNG 2.1.1_2 is not updating the tables. When I compare the /var/db/aliastables with the Diagnostics -> Table they are not in sync.

Also errors in syslog

RonpfS · Aug 13, 2016, 4:55 PM

What errors do you get in system logs?

digdug3 · Aug 13, 2016, 5:59 PM

Aug 13 19:59:19 php-cgi rc.update_urltables: /etc/rc.update_urltables: ERROR: could not update pfB_FHLevel3 content from https://127.0.0.1:8006/pfblockerng/pfblockerng.php?pfb=pfB_FHLevel3
Aug 13 19:59:19 php-cgi rc.update_urltables: Download file failed with status code 0. URL: https://127.0.0.1:8006/pfblockerng/pfblockerng.php?pfb=pfB_FHLevel3
Aug 13 19:59:19 php-cgi rc.update_urltables: /etc/rc.update_urltables: Starting URL table alias updates
Aug 13 19:59:19 php-cgi rc.update_urltables: /etc/rc.update_urltables: Starting up.

RonpfS · Aug 13, 2016, 6:24 PM

And what about the pfblockerng.log ?

digdug3 · Aug 13, 2016, 6:46 PM

No errors there, but the pfsense tables are just not updated. Also a 0.0.0.0/1 address is in one of the lists.
Already send a message to BBCan.

Strange thing is even though there are errors in the syslog pfSense tells me:

"The pfB_FHLevel3 database has been updated."

When pressing the update button under diagnostics/tables.

RonpfS · Aug 13, 2016, 6:45 PM

maybe there is an error in the pfB_FHLevel3 Aliases
Did you ran a Force Reload IP ?

digdug3 · Aug 13, 2016, 6:47 PM

Force reload/removed aliases (/var/db/pfblockerng and /var/db/aliastables). rebooted etc.
Tables just don't get updated.

Already fixed a 127.0.0.1 problem with BBCan before, maybe the bug is still there because of the 0.0.0.0/1 also being there.

RonpfS · Aug 13, 2016, 6:52 PM

What's the URL for the feed in question ? Load the URL in the browser and see if something is wrong.
If you disable the Feed things are ok?
Do you have suppression enabled ?

digdug3 · Aug 13, 2016, 6:55 PM

The feed has been updated and the 0.0.0.0/1 has been removed. But that can happen again of course when a feed adds 0.0.0.0 again.
The ip's do get sanitized, but somehow it slipped through.

Biggest problem right now is the tables don't get updated and the 0.0.0.0/1 won't go away.

Is there a way to downgrade a package?

RonpfS · Aug 13, 2016, 7:02 PM

No you can not downgrade the package.

If you enable suppression it should have removed the 0.0.0.0/1

Can you post the Force Reload log ?

digdug3 · Aug 13, 2016, 7:06 PM

It's reloading now. Will send you a PM

digdug3 · Aug 14, 2016, 8:17 AM

We will have to wait for BBCan to come back to get this fixed, for now disable the feed causing the table not updating.