pfBlockerNG MaxMind Registration required to continue to use the GeoIP functionality!
-
@BBcan177
Uninstalled pfBlockerNG and installed pfBlockerNG-devel 2.2.5_28. Ran update as follows:UPDATE PROCESS START [ 01/02/20 16:36:16 ] ===[ DNSBL Process ]================================================ Saving DNSBL database... completed Clearing all DNSBL Feeds completed Reloading Unbound Resolver..... completed DNSBL update [ 0 | PASSED ]... completed ------------------------------------------------------------------------ ===[ GeoIP Process ]============================================ MaxMind Database downloading and processing ( approx 4MB ) ... Please wait ... Download Process Starting [ 01/02/20 16:36:16 ] /usr/local/share/GeoIP/GeoLite2-Country.tar.gz 200 OK /usr/local/share/GeoIP/GeoLite2-Country-CSV.zip 200 OK Download Process Ended [ 01/02/20 16:36:17 ] Country code update Start Processing ISO IPv4 Continent/Country Data Processing ISO IPv6 Continent/Country Data [ 01/02/20 16:36:23 ] Creating pfBlockerNG Continent PHP files IPv4 Africa [ 01/02/20 16:36:24 ] IPv6 Africa [ 01/02/20 16:36:25 ] IPv4 Antarctica IPv6 Antarctica IPv4 Asia IPv6 Asia IPv4 Europe IPv6 Europe [ 01/02/20 16:36:27 ] IPv4 North America IPv6 North America [ 01/02/20 16:36:28 ] IPv4 Oceania IPv6 Oceania [ 01/02/20 16:36:29 ] IPv4 South America IPv6 South America IPv4 Proxy and Satellite IPv6 Proxy and Satellite IPv4 Top Spammers IPv6 Top Spammers pfBlockerNG Reputation Tab Country Code Update Ended ===[ IPv4 Process ]================================================= [ DNSBLIP_v4 ] Downloading update [ 01/02/20 16:36:29 ] . [ DNSBLIP_v4 ] file_get_contents(/var/db/pfblockerng/DNSBLIP_v4.txt): failed to open stream: No such file or directory [ pfB_DNSBLIP_v4 - DNSBLIP_v4 ] Download FAIL Local File Failure The Following List has been REMOVED [ DNSBLIP_v4 ] ===[ Aliastables / Rules ]========================================== No changes to Firewall rules, skipping Filter Reload No Changes to Aliases, Skipping pfctl Update UPDATE PROCESS ENDED
Looks like an error with DNSBLIP?
~Doug
-
OK I found the issue with pfBlockerNG and the "tar" error.
I posted a fix here (v. 2.1.4_20)
https://github.com/pfsense/FreeBSD-ports/pull/742/filesWould still recommend that everyone move to pfBlockerNG-devel. Will be ending pfBlockerNG version soon.
The DNSBL Error might be fixed with a "Force Reload - All"
-
Let's to note that another one great DB exist ip2location company.
Like in MaxMind for end user there are free DB to download. -
Thank you so much!
-
@mcury said in pfBlockerNG MaxMind Registration required to continue to use the GeoIP functionality!:
I just updated, already put my license key and it's working.
How do you know it worked?
I am on pfBlockerNG-devel 2.2.5_28, added MaxMind License Key, ran update and reload, but when look at
ls -lah /usr/local/share/GeoIP/
my files dated Dec 3 2019Did it work ?
-
@chudak Probably "working" in that it no longer throws the error. MaxMind updates their data first Tuesday of every month, but pfBNG doesn't until the following Thursday in case there's a delay. Check again on the 9th. If I'm incorrect please let me know.
-
@provels
Will do, thx -
@chudak said in pfBlockerNG MaxMind Registration required to continue to use the GeoIP functionality!:
@mcury said in pfBlockerNG MaxMind Registration required to continue to use the GeoIP functionality!:
I just updated, already put my license key and it's working.
How do you know it worked?
I am on pfBlockerNG-devel 2.2.5_28, added MaxMind License Key, ran update and reload, but when look at
ls -lah /usr/local/share/GeoIP/
my files dated Dec 3 2019Did it work ?
You can run the following from the command prompt to see if it updates:
"php /usr/local/www/pfblockerng/pfblockerng.php dc", copy and paste without the quotes. -
@chudak I'm using 2.4.4p3 with pfBlocker-NG-devel 2.2.5_28
Check if the files downloaded from maxmind are located at:
ls -lah /usr/local/share/GeoIP/
Check the logs during the maxmind download, as you can see, it downloaded a 4MB database file.
**Saving configuration [ 01/05/20 12:32:23 ]** MaxMind Database downloading and processing ( approx 4MB ) ... Please wait ... Download Process Starting [ 01/05/20 12:32:24 ] /usr/local/share/GeoIP/GeoLite2-Country.tar.gz 200 OK /usr/local/share/GeoIP/GeoLite2-Country-CSV.zip 200 OK Download Process Ended [ 01/05/20 12:32:28 ] Country code update Start Processing ISO IPv4 Continent/Country Data [ 01/05/20 12:32:31 ] Processing ISO IPv6 Continent/Country Data [ 01/05/20 12:33:08 ] Creating pfBlockerNG Continent PHP files IPv4 Africa [ 01/05/20 12:33:18 ] IPv6 Africa [ 01/05/20 12:33:19 ] IPv4 Antarctica IPv6 Antarctica IPv4 Asia IPv6 Asia [ 01/05/20 12:33:22 ] IPv4 Europe [ 01/05/20 12:33:23 ] IPv6 Europe [ 01/05/20 12:33:33 ] IPv4 North America [ 01/05/20 12:33:35 ] IPv6 North America [ 01/05/20 12:33:42 ] IPv4 Oceania [ 01/05/20 12:33:44 ] IPv6 Oceania IPv4 South America IPv6 South America [ 01/05/20 12:33:45 ] IPv4 Proxy and Satellite [ 01/05/20 12:33:46 ] IPv6 Proxy and Satellite IPv4 Top Spammers IPv6 Top Spammers pfBlockerNG Reputation Tab Country Code Update Ended
-
@jdeloach said in pfBlockerNG MaxMind Registration required to continue to use the GeoIP functionality!:
@chudak said in pfBlockerNG MaxMind Registration required to continue to use the GeoIP functionality!:
@mcury said in pfBlockerNG MaxMind Registration required to continue to use the GeoIP functionality!:
I just updated, already put my license key and it's working.
How do you know it worked?
I am on pfBlockerNG-devel 2.2.5_28, added MaxMind License Key, ran update and reload, but when look at
ls -lah /usr/local/share/GeoIP/
my files dated Dec 3 2019Did it work ?
You can run the following from the command prompt to see if it updates:
"php /usr/local/www/pfblockerng/pfblockerng.php dc", copy and paste without the quotes.yup that worked, thx !
-
@BBcan177 , on pfBlockerNG, v2.1.4_20, it looks like if I open the plugin page (Firewall/pfBlockerNG) the MaxMind License Key field is blank. maxmind_key is populated in the saved config file, which I saved after entering it...I'm thinking maybe it's not populating correctly on the page?
(saw your comment about upgrading/moving to -devel in all cases, just haven't gotten to that yet)
-
@jdeloach said in pfBlockerNG MaxMind Registration required to continue to use the GeoIP functionality!:
You can run the following from the command prompt to see if it updates:
"php /usr/local/www/pfblockerng/pfblockerng.php dc", copy and paste without the quotes.confirmed: running 2.4.4-RELEASE-p3 -> pfBlockerNG 2.1.4_20 (updated, paste the MaxMind "License Key") worked!
Thank you very much!
-
I'll just add that I updated the package, filled in the key and ran an update. All went smoothly.
Steve
-
@dougs said in pfBlockerNG MaxMind Registration required to continue to use the GeoIP functionality!:
@BBcan177
Uninstalled pfBlockerNG and installed pfBlockerNG-devel 2.2.5_28. Ran update as follows:UPDATE PROCESS START [ 01/02/20 16:36:16 ] ===[ DNSBL Process ]================================================ Saving DNSBL database... completed Clearing all DNSBL Feeds completed Reloading Unbound Resolver..... completed DNSBL update [ 0 | PASSED ]... completed ------------------------------------------------------------------------ ===[ GeoIP Process ]============================================ MaxMind Database downloading and processing ( approx 4MB ) ... Please wait ... Download Process Starting [ 01/02/20 16:36:16 ] /usr/local/share/GeoIP/GeoLite2-Country.tar.gz 200 OK /usr/local/share/GeoIP/GeoLite2-Country-CSV.zip 200 OK Download Process Ended [ 01/02/20 16:36:17 ] Country code update Start Processing ISO IPv4 Continent/Country Data Processing ISO IPv6 Continent/Country Data [ 01/02/20 16:36:23 ] Creating pfBlockerNG Continent PHP files IPv4 Africa [ 01/02/20 16:36:24 ] IPv6 Africa [ 01/02/20 16:36:25 ] IPv4 Antarctica IPv6 Antarctica IPv4 Asia IPv6 Asia IPv4 Europe IPv6 Europe [ 01/02/20 16:36:27 ] IPv4 North America IPv6 North America [ 01/02/20 16:36:28 ] IPv4 Oceania IPv6 Oceania [ 01/02/20 16:36:29 ] IPv4 South America IPv6 South America IPv4 Proxy and Satellite IPv6 Proxy and Satellite IPv4 Top Spammers IPv6 Top Spammers pfBlockerNG Reputation Tab Country Code Update Ended ===[ IPv4 Process ]================================================= [ DNSBLIP_v4 ] Downloading update [ 01/02/20 16:36:29 ] . [ DNSBLIP_v4 ] file_get_contents(/var/db/pfblockerng/DNSBLIP_v4.txt): failed to open stream: No such file or directory [ pfB_DNSBLIP_v4 - DNSBLIP_v4 ] Download FAIL Local File Failure The Following List has been REMOVED [ DNSBLIP_v4 ] ===[ Aliastables / Rules ]========================================== No changes to Firewall rules, skipping Filter Reload No Changes to Aliases, Skipping pfctl Update UPDATE PROCESS ENDED
Looks like an error with DNSBLIP?
~Doug
Having the same issue
-
@bjurkovski said in pfBlockerNG MaxMind Registration required to continue to use the GeoIP functionality!:
@dougs said in pfBlockerNG MaxMind Registration required to continue to use the GeoIP functionality!:
@BBcan177
Uninstalled pfBlockerNG and installed pfBlockerNG-devel 2.2.5_28. Ran update as follows:Looks like an error with DNSBLIP?
~Doug
Having the same issue
Maybe an Force Update can help?
Something else - I switched from pfblockerng to pfblockerng-devel an there is a increase of RAM usage from about 13% - is it also in your case?Thanks,
fireodo -
@teamits said in pfBlockerNG MaxMind Registration required to continue to use the GeoIP functionality!:
@BBcan177 , on pfBlockerNG, v2.1.4_20, it looks like if I open the plugin page (Firewall/pfBlockerNG) the MaxMind License Key field is blank. maxmind_key is populated in the saved config file, which I saved after entering it
I checked several times yesterday and the field had the key in it each time I logged in. On a hunch waited until overnight again, and this morning the field is blank in the GUI. Seems so unlikely but is there some way it could disappear overnight? If I export the config file this morning it's missing, compared to my last export 3 days ago:
<enable_log/>
<skipfeed>0</skipfeed>
<log_maxlines>20000</log_maxlines>
<maxmind_key>****</maxmind_key>
<maxmind_locale>en</maxmind_locale>
<database_cc/>
<inbound_interface>wan</inbound_interface>vs
<enable_log/>
<maxmind_locale>en</maxmind_locale>
<database_cc/>
<skipfeed>0</skipfeed>
<log_maxlines>20000</log_maxlines>
<inbound_interface>wan</inbound_interface>FWIW this is on an SG-4860 and it hasn't restarted in months.
-
Hi,
just a quiston: If Idon't want to use GeoIP and set "Disable MaxMind CSV database Updates" checkbox I'm already get an notification every hour that "MaxMind need a license". Is there a way to block this spam without disabling the notification or uninistalling pfBlockerNG?
Cheers
Marco -
@MarcO42
You need to disable the "Action" settings in the GeoIP tab and any IPv4/6 aliases that use the "GeoIP" state for the notifications to stop. -
Instead of sign up Maxmind, can we use IP2Location database as replacement?
-
@christopa1999 said in pfBlockerNG MaxMind Registration required to continue to use the GeoIP functionality!:
Instead of sign up Maxmind, can we use IP2Location database as replacement?
Why avoid registration?
Just using MaxMind at this moment and after IP2locations integration ready, - just choose. ;)