Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Errors loading rules

    Scheduled Pinned Locked Moved pfBlockerNG
    21 Posts 5 Posters 2.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator
      last edited by johnpoz

      Well I don't use whatever list your using there - but could be a problem with the list, could be a problem with your connection to where that list is located, etc.

      What specific list is in - there are a lot of them.. Post a pic of where you set that, and I can try and download it.

      edit: is it this?
      thisone.jpg

      edit2: if you load it in a browser does it come up

      https://osint.bambenekconsulting.com/feeds/c2-ipmasterlist-high.txt

      list.jpg

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      1 Reply Last reply Reply Quote 0
      • RonpfSR
        RonpfS @Phantom_Stage
        last edited by RonpfS

        @Phantom_Stage said in Errors loading rules:

        (pfB_PRI1_v4 - BBC_C2_v4 ] Download FAIL [ 01/09/20 16:01:40)

        This one isn't GeoIP related. 😴

        But if all pfBlockerNG boxes around the planet are using default Cron settings, it's possible that some web sites are getting hit hard every hour.

        Change Cron Start Hour, Cron Start minutes, even better change Cron hour interval to something bigger.

        https://www.reddit.com/r/pfBlockerNG/comments/em3l38/bbc_c2_v4_download_fail/fdo3d1s?utm_source=share&utm_medium=web2x

        CF 522 connection timeout. Also another entry that is CF 525 SSL handshake failed.

        2.4.5-RELEASE-p1 (amd64)
        Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
        Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

        1 Reply Last reply Reply Quote 0
        • provelsP
          provels @Phantom_Stage
          last edited by provels

          @Phantom_Stage @johnpoz That's this list.
          https://osint.bambenekconsulting.com/feeds/c2-ipmasterlist-high.txt
          It's part of the preconfigured feeds, not GeoIP. If you can hit the link, it should work now. Maybe it was offline temporarily.

          [ BBC_C2_v4 ]			 Reload [ 01/09/20 17:19:54 ] . completed ..
          
            Aggregation Stats:
            ------------------
            Original Final      
            ------------------
            214      136        
            ------------------
            ------------------------------
            Original Master     Final     
            ------------------------------
            214      136        136         [ Pass ] 
          

          Peder

          MAIN - pfSense+ 24.11-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD. 500 GB HDD for SyslogNG
          BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by

            I don't think its default to be on... I do not recall ever going in and turning it OFF... And as you can see it is..

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            RonpfSR J 2 Replies Last reply Reply Quote 0
            • RonpfSR
              RonpfS @johnpoz
              last edited by RonpfS

              @johnpoz Feeds have evolved over the last year, pfBlockerNG as well.

              2.4.5-RELEASE-p1 (amd64)
              Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
              Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

              1 Reply Last reply Reply Quote 0
              • J
                jdeloach @johnpoz
                last edited by

                @johnpoz said in Errors loading rules:

                I don't think its default to be on... I do not recall ever going in and turning it OFF... And as you can see it is..

                I thought maybe the default that @RonpfS was referring to was the update interval. The default on some of these lists is once per hour. If he left the default at once per hour and several other folks are trying to update once an hour as well, that could cause an overload on the server where the list is located and cause the download to fail. Really the download interval on most all of these lists should be no more often than once per day.

                1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator
                  last edited by

                  That is true but running the latest version.. And its off on mine.. I really don't use any of those anyway.. I just use the geoip based stuff to be honest. I just use the alias feature..

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  1 Reply Last reply Reply Quote 0
                  • P
                    Phantom_Stage
                    last edited by

                    Sorry been busy with work and home PC upgrade finally back up

                    1 Reply Last reply Reply Quote 0
                    • P
                      Phantom_Stage
                      last edited by Phantom_Stage

                      Not really sure what you guy's are talking about here kinda like a fresh nu-Bee with this. but I am using the Geo IP and DNSBL. Will look further into logs and see if I can narrow this down.

                      Here is what I see in the logs as failed.

                      Previous download failed. Re-attempt download
                      [ CINS_army_v4 ]
                      Remote timestamp: Fri, 10 Jan 2020 22:25:07 GMT

                      Failed to download Feed for md5 comparison! Update skipped
                      [ CINS_army_v4 ] [ 01/10/20 19:01:02 ]
                      Remote timestamp: Fri, 10 Jan 2020 23:20:39 GMT

                      1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator
                        last edited by

                        If your having problems downloading lists - you have to check with the list owner.

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 0
                        • P
                          Phantom_Stage
                          last edited by

                          Ok Thanks for all the help John.

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.