Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    pfBlockerNG-devel feedback

    Scheduled Pinned Locked Moved pfBlockerNG
    102 Posts 26 Posters 101.0k Views 23 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B Offline
      bartkowski
      last edited by

      Overall very happy, no issues that I could see.

      But I just got this error while looking at log files.

      PHP ERROR: Type: 1, File: /usr/local/www/pfblockerng/pfblockerng_log.php, Line: 192, Message: Allowed memory size of 536870912 bytes exhausted (tried to allocate 129 bytes) @ 2018-08-21 11:23:59

      BBcan177B RonpfSR 2 Replies Last reply Reply Quote 0
      • BBcan177B Offline
        BBcan177 Moderator @Grimson
        last edited by

        @grimson that was fixed early on. You must have been an early tester and created those easylist entries with the old code. You could try a "save" in the Easylist Tab to see if that repairs those entries.

        "Experience is something you don't get until just after you need it."

        Website: http://pfBlockerNG.com
        Twitter: @BBcan177  #pfBlockerNG
        Reddit: https://www.reddit.com/r/pfBlockerNG/new/

        GrimsonG 1 Reply Last reply Reply Quote 0
        • BBcan177B Offline
          BBcan177 Moderator @bartkowski
          last edited by

          @bartkowski that could happen if you attempt to view a very large log file and it exhausted the browser/php memory trying to load that log file.

          "Experience is something you don't get until just after you need it."

          Website: http://pfBlockerNG.com
          Twitter: @BBcan177  #pfBlockerNG
          Reddit: https://www.reddit.com/r/pfBlockerNG/new/

          1 Reply Last reply Reply Quote 0
          • GrimsonG Offline
            Grimson Banned @BBcan177
            last edited by

            @bbcan177 said in pfBlockerNG-devel feedback:

            @grimson that was fixed early on. You must have been an early tester and created those easylist entries with the old code. You could try a "save" in the Easylist Tab to see if that repairs those entries.

            No, a save does mix them up differently but they still don't match.

            1 Reply Last reply Reply Quote 0
            • RonpfSR Offline
              RonpfS @bartkowski
              last edited by RonpfS

              @bartkowski You could try to increase the "memory_limit" settings in /etc/inc/config.inc. This change will be lost when you upgrade pfsense as it installs the defaut config.inc.

              // Set memory limit to 512M on amd64.
              if ($ARCH == "amd64") {
              	ini_set("memory_limit", "512M");
              } else {
              	ini_set("memory_limit", "128M");
              }
              

              You can also the limit the size of pfblocker log files in pfBlockerNG / General Tab / Log Settings .

              2.4.5-RELEASE-p1 (amd64)
              Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
              Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

              B 1 Reply Last reply Reply Quote 0
              • B Offline
                bartkowski @RonpfS
                last edited by bartkowski

                @ronpfs I'm running the SG-2440 with stock RAM. I'll give this a try.

                Edit: My config.inc file shows the same memory limits.

                1 Reply Last reply Reply Quote 0
                • GrimsonG Offline
                  Grimson Banned
                  last edited by Grimson

                  Ok, I did a fresh install (removed previous package and cleaned out any remaining files in /tmp) of pfBlockerNG-devel version 2.2.5_10 on pfSense 2.4.3p1.

                  On the first visit of the EasyList feeds page everything is fine. Then I enabled EasyList, EasyPrivacy and Easylist German with all of their content, set Action to Unbound and saved the settings. Now the feed URLs in the UI are mixed up again. I'm using Firefox 61.0.2 but I see the same in IE. They do show fine in the config.xml, so I guess something gets mixed up when reading/interpreting the config for the UI:

                  0_1535117945591_easylist_config.txt

                  BBcan177B 1 Reply Last reply Reply Quote 0
                  • BBcan177B Offline
                    BBcan177 Moderator @Grimson
                    last edited by

                    @grimson

                    I'm working on a patch for this... I will shoot you a PM if you don't mind testing that when its completed?

                    "Experience is something you don't get until just after you need it."

                    Website: http://pfBlockerNG.com
                    Twitter: @BBcan177  #pfBlockerNG
                    Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                    GrimsonG 1 Reply Last reply Reply Quote 0
                    • GrimsonG Offline
                      Grimson Banned @BBcan177
                      last edited by

                      @bbcan177 said in pfBlockerNG-devel feedback:

                      @grimson

                      I'm working on a patch for this... I will shoot you a PM if you don't mind testing that when its completed?

                      Happy to help, I have the System_Patches package installed so providing a patch is probably the easiest way to test the fix.

                      1 Reply Last reply Reply Quote 0
                      • BBcan177B Offline
                        BBcan177 Moderator
                        last edited by

                        @grimson said in pfBlockerNG-devel feedback:

                        Happy to help, I have the System_Patches package installed so providing a patch is probably the easiest way to test the fix.

                        @Grimson, its just as easy to download the two patched files below. Let me know how it goes.

                        fetch -o /usr/local/pkg/pfblockerng/pfblockerng.inc "https://raw.githubusercontent.com/BBcan177/FreeBSD-ports/patch-1/net/pfSense-pkg-pfBlockerNG-devel/files/usr/local/pkg/pfblockerng/pfblockerng.inc"
                        
                        fetch -o /usr/local/www/pfblockerng/pfblockerng_category_edit.php "https://raw.githubusercontent.com/BBcan177/FreeBSD-ports/patch-1/net/pfSense-pkg-pfBlockerNG-devel/files/usr/local/www/pfblockerng/pfblockerng_category_edit.php"
                        

                        "Experience is something you don't get until just after you need it."

                        Website: http://pfBlockerNG.com
                        Twitter: @BBcan177  #pfBlockerNG
                        Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                        1 Reply Last reply Reply Quote 0
                        • GrimsonG Offline
                          Grimson Banned
                          last edited by

                          Looks good, I couldn't reproduce the issue anymore. Thanks.

                          BBcan177B 1 Reply Last reply Reply Quote 0
                          • BBcan177B Offline
                            BBcan177 Moderator @Grimson
                            last edited by

                            @grimson said in pfBlockerNG-devel feedback:

                            Looks good, I couldn't reproduce the issue anymore. Thanks

                            Great. Thanks for testing. There are a bunch of changes in the next pull request:

                            https://github.com/pfsense/FreeBSD-ports/pull/559

                            "Experience is something you don't get until just after you need it."

                            Website: http://pfBlockerNG.com
                            Twitter: @BBcan177  #pfBlockerNG
                            Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                            1 Reply Last reply Reply Quote 0
                            • L Offline
                              lordbob75
                              last edited by

                              I did not notice for a while, but it looks like ever since I upgraded to this version the DNSBL has been crashing and restarting every minute, along with the service watchdog.

                              I've also got the out of sync error, but I've force reloaded a bunch of times and the log just says DNSBL is out of sync. Not sure what to look for in it.

                              1 Reply Last reply Reply Quote 0
                              • RonpfSR Offline
                                RonpfS
                                last edited by RonpfS

                                There is no need to place DNSBL under the System Watchdog.

                                You need to post the log of a Force Reload All if you want to get help.

                                One thing that can generate Out of Sync warnings is if you have Header/Label that are not unique.

                                2.4.5-RELEASE-p1 (amd64)
                                Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
                                Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

                                L 1 Reply Last reply Reply Quote 0
                                • L Offline
                                  lordbob75 @RonpfS
                                  last edited by

                                  @ronpfs ah, well then that should fix that part.

                                  I've attached the log to this post.
                                  0_1535239826092_pfblockerng.zip

                                  RonpfSR 1 Reply Last reply Reply Quote 0
                                  • RonpfSR Offline
                                    RonpfS @lordbob75
                                    last edited by

                                    @lordbob75

                                    *** DNSBL update [ 850567 ] [ 824258 ] ... OUT OF SYNC ! *** [ 08/25/18 16:04:06 ]
                                    
                                    

                                    850567 - 824258 = 26309

                                    Searching for 26309 show that you load twice Malware_Domains

                                    
                                    [ Malware_Domains ]		 Reload [ 08/25/18 15:58:47 ] . completed ..
                                      ----------------------------------------------------------------------
                                      Orig.    Unique     # Dups     # White    # TOP1M    Final                
                                      ----------------------------------------------------------------------
                                      26446    26446      137        0          0          26309                
                                      ----------------------------------------------------------------------
                                    
                                    
                                    [ Malware_Domains ]		 Reload [ 08/25/18 15:59:21 ] . completed ..
                                      ----------------------------------------------------------------------
                                      Orig.    Unique     # Dups     # White    # TOP1M    Final                
                                      ----------------------------------------------------------------------
                                      26446    26446      137        0          0          26309                
                                      ----------------------------------------------------------------------
                                    

                                    2.4.5-RELEASE-p1 (amd64)
                                    Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
                                    Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

                                    L 1 Reply Last reply Reply Quote 0
                                    • L Offline
                                      lordbob75 @RonpfS
                                      last edited by

                                      @ronpfs Awesome, thanks. I'll fix it. I'm not sure I understand how the number searched worked though. I'm not sure how to explain what I don't get about it.

                                         26309 /var/db/pfblockerng/dnsbl/Malware_Domains.txt
                                      

                                      In that list, is that number like the start of where that list adds to the master list or something? If that makes sense?

                                      RonpfSR 1 Reply Last reply Reply Quote 0
                                      • RonpfSR Offline
                                        RonpfS @lordbob75
                                        last edited by RonpfS

                                        @lordbob75 said in pfBlockerNG-devel feedback:

                                        that number

                                        That's the number of Domain Names computed after removing Whitelist, TOP1M, Duplicates from other lists, etc.

                                        2.4.5-RELEASE-p1 (amd64)
                                        Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
                                        Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

                                        L 1 Reply Last reply Reply Quote 0
                                        • L Offline
                                          lordbob75 @RonpfS
                                          last edited by lordbob75

                                          @ronpfs Ok, that's what I figured but wanted to confirm. I appreciate the help!

                                          Edit: removing the duplicate entry did indeed fix it, awesome.

                                          1 Reply Last reply Reply Quote 0
                                          • A Offline
                                            anttechs
                                            last edited by

                                            I have tried it and loved it and I can't wait for it to come out :)

                                            Intel(R) Celeron(R) CPU J1900 @ 1.99GHz
                                            Current: 1992 MHz, Max: 1993 MHz
                                            4 CPUs: 1 package(s) x 4 core(s)
                                            AES-NI CPU Crypto: No
                                            8 Gig RAM
                                            250GB SSD

                                            https://ant-techs.is/ip-blocklists

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.