Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Errors loading rules

    Scheduled Pinned Locked Moved pfBlockerNG
    21 Posts 5 Posters 2.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator
      last edited by johnpoz

      Well you understand that the geoip now requires a api token, so you have to have an account... If pulling any geoip stuff its going to fail without that info.

      Not sure exactly what is all included in what your trying to download there.

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      1 Reply Last reply Reply Quote 0
      • P
        Phantom_Stage
        last edited by

        I did sign up for my MaxMind account everything else seems to download.

        1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator
          last edited by johnpoz

          Well I don't use whatever list your using there - but could be a problem with the list, could be a problem with your connection to where that list is located, etc.

          What specific list is in - there are a lot of them.. Post a pic of where you set that, and I can try and download it.

          edit: is it this?
          thisone.jpg

          edit2: if you load it in a browser does it come up

          https://osint.bambenekconsulting.com/feeds/c2-ipmasterlist-high.txt

          list.jpg

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          1 Reply Last reply Reply Quote 0
          • RonpfSR
            RonpfS @Phantom_Stage
            last edited by RonpfS

            @Phantom_Stage said in Errors loading rules:

            (pfB_PRI1_v4 - BBC_C2_v4 ] Download FAIL [ 01/09/20 16:01:40)

            This one isn't GeoIP related. 😴

            But if all pfBlockerNG boxes around the planet are using default Cron settings, it's possible that some web sites are getting hit hard every hour.

            Change Cron Start Hour, Cron Start minutes, even better change Cron hour interval to something bigger.

            https://www.reddit.com/r/pfBlockerNG/comments/em3l38/bbc_c2_v4_download_fail/fdo3d1s?utm_source=share&utm_medium=web2x

            CF 522 connection timeout. Also another entry that is CF 525 SSL handshake failed.

            2.4.5-RELEASE-p1 (amd64)
            Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
            Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

            1 Reply Last reply Reply Quote 0
            • provelsP
              provels @Phantom_Stage
              last edited by provels

              @Phantom_Stage @johnpoz That's this list.
              https://osint.bambenekconsulting.com/feeds/c2-ipmasterlist-high.txt
              It's part of the preconfigured feeds, not GeoIP. If you can hit the link, it should work now. Maybe it was offline temporarily.

              [ BBC_C2_v4 ]			 Reload [ 01/09/20 17:19:54 ] . completed ..
              
                Aggregation Stats:
                ------------------
                Original Final      
                ------------------
                214      136        
                ------------------
                ------------------------------
                Original Master     Final     
                ------------------------------
                214      136        136         [ Pass ] 
              

              Peder

              MAIN - pfSense+ 24.11-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD. 500 GB HDD for SyslogNG
              BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

              1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator
                last edited by

                I don't think its default to be on... I do not recall ever going in and turning it OFF... And as you can see it is..

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                RonpfSR J 2 Replies Last reply Reply Quote 0
                • RonpfSR
                  RonpfS @johnpoz
                  last edited by RonpfS

                  @johnpoz Feeds have evolved over the last year, pfBlockerNG as well.

                  2.4.5-RELEASE-p1 (amd64)
                  Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
                  Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

                  1 Reply Last reply Reply Quote 0
                  • J
                    jdeloach @johnpoz
                    last edited by

                    @johnpoz said in Errors loading rules:

                    I don't think its default to be on... I do not recall ever going in and turning it OFF... And as you can see it is..

                    I thought maybe the default that @RonpfS was referring to was the update interval. The default on some of these lists is once per hour. If he left the default at once per hour and several other folks are trying to update once an hour as well, that could cause an overload on the server where the list is located and cause the download to fail. Really the download interval on most all of these lists should be no more often than once per day.

                    1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator
                      last edited by

                      That is true but running the latest version.. And its off on mine.. I really don't use any of those anyway.. I just use the geoip based stuff to be honest. I just use the alias feature..

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      1 Reply Last reply Reply Quote 0
                      • P
                        Phantom_Stage
                        last edited by

                        Sorry been busy with work and home PC upgrade finally back up

                        1 Reply Last reply Reply Quote 0
                        • P
                          Phantom_Stage
                          last edited by Phantom_Stage

                          Not really sure what you guy's are talking about here kinda like a fresh nu-Bee with this. but I am using the Geo IP and DNSBL. Will look further into logs and see if I can narrow this down.

                          Here is what I see in the logs as failed.

                          Previous download failed. Re-attempt download
                          [ CINS_army_v4 ]
                          Remote timestamp: Fri, 10 Jan 2020 22:25:07 GMT

                          Failed to download Feed for md5 comparison! Update skipped
                          [ CINS_army_v4 ] [ 01/10/20 19:01:02 ]
                          Remote timestamp: Fri, 10 Jan 2020 23:20:39 GMT

                          1 Reply Last reply Reply Quote 0
                          • johnpozJ
                            johnpoz LAYER 8 Global Moderator
                            last edited by

                            If your having problems downloading lists - you have to check with the list owner.

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                            1 Reply Last reply Reply Quote 0
                            • P
                              Phantom_Stage
                              last edited by

                              Ok Thanks for all the help John.

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.