pfBlockerNG MaxMind Registration required to continue to use the GeoIP functionality!

jdeloach · Jan 6, 2020, 5:24 PM

@chudak said in pfBlockerNG MaxMind Registration required to continue to use the GeoIP functionality!:

@mcury said in pfBlockerNG MaxMind Registration required to continue to use the GeoIP functionality!:

I just updated, already put my license key and it's working.

How do you know it worked?

I am on pfBlockerNG-devel 2.2.5_28, added MaxMind License Key, ran update and reload, but when look at
ls -lah /usr/local/share/GeoIP/
my files dated Dec 3 2019

Did it work ?

You can run the following from the command prompt to see if it updates:
"php /usr/local/www/pfblockerng/pfblockerng.php dc", copy and paste without the quotes.

mcury · Jan 6, 2020, 5:25 PM

@chudak I'm using 2.4.4p3 with pfBlocker-NG-devel 2.2.5_28

Check if the files downloaded from maxmind are located at:

ls -lah /usr/local/share/GeoIP/

Check the logs during the maxmind download, as you can see, it downloaded a 4MB database file.

**Saving configuration [ 01/05/20 12:32:23 ]**

MaxMind Database downloading and processing ( approx 4MB ) ... Please wait ...

Download Process Starting [ 01/05/20 12:32:24 ]
 /usr/local/share/GeoIP/GeoLite2-Country.tar.gz		200 OK
 /usr/local/share/GeoIP/GeoLite2-Country-CSV.zip		200 OK
Download Process Ended [ 01/05/20 12:32:28 ]

Country code update Start
 Processing ISO IPv4 Continent/Country Data [ 01/05/20 12:32:31 ]
 Processing ISO IPv6 Continent/Country Data [ 01/05/20 12:33:08 ]
 Creating pfBlockerNG Continent PHP files
 IPv4 Africa			 [ 01/05/20 12:33:18 ]
 IPv6 Africa			 [ 01/05/20 12:33:19 ]
 IPv4 Antarctica		
 IPv6 Antarctica		
 IPv4 Asia			
 IPv6 Asia			 [ 01/05/20 12:33:22 ]
 IPv4 Europe			 [ 01/05/20 12:33:23 ]
 IPv6 Europe			 [ 01/05/20 12:33:33 ]
 IPv4 North America		 [ 01/05/20 12:33:35 ]
 IPv6 North America		 [ 01/05/20 12:33:42 ]
 IPv4 Oceania			 [ 01/05/20 12:33:44 ]
 IPv6 Oceania			
 IPv4 South America		
 IPv6 South America		 [ 01/05/20 12:33:45 ]
 IPv4 Proxy and Satellite	 [ 01/05/20 12:33:46 ]
 IPv6 Proxy and Satellite	
 IPv4 Top Spammers		
 IPv6 Top Spammers		
 pfBlockerNG Reputation Tab
Country Code Update Ended

chudak · Jan 6, 2020, 5:26 PM

@jdeloach said in pfBlockerNG MaxMind Registration required to continue to use the GeoIP functionality!:

@chudak said in pfBlockerNG MaxMind Registration required to continue to use the GeoIP functionality!:

@mcury said in pfBlockerNG MaxMind Registration required to continue to use the GeoIP functionality!:

I just updated, already put my license key and it's working.

How do you know it worked?

I am on pfBlockerNG-devel 2.2.5_28, added MaxMind License Key, ran update and reload, but when look at
ls -lah /usr/local/share/GeoIP/
my files dated Dec 3 2019

Did it work ?

You can run the following from the command prompt to see if it updates:
"php /usr/local/www/pfblockerng/pfblockerng.php dc", copy and paste without the quotes.

yup that worked, thx !

SteveITS · Jan 6, 2020, 6:23 PM

@BBcan177 , on pfBlockerNG, v2.1.4_20, it looks like if I open the plugin page (Firewall/pfBlockerNG) the MaxMind License Key field is blank. maxmind_key is populated in the saved config file, which I saved after entering it...I'm thinking maybe it's not populating correctly on the page?

(saw your comment about upgrading/moving to -devel in all cases, just haven't gotten to that yet)

jan.kerstan · Jan 7, 2020, 12:36 PM

@jdeloach said in pfBlockerNG MaxMind Registration required to continue to use the GeoIP functionality!:

You can run the following from the command prompt to see if it updates:
"php /usr/local/www/pfblockerng/pfblockerng.php dc", copy and paste without the quotes.

confirmed: running 2.4.4-RELEASE-p3 -> pfBlockerNG 2.1.4_20 (updated, paste the MaxMind "License Key") worked!

Thank you very much!

stephenw10 · Jan 7, 2020, 2:42 PM

I'll just add that I updated the package, filled in the key and ran an update. All went smoothly.

Steve

bjurkovski · Jan 8, 2020, 11:18 AM

@dougs said in pfBlockerNG MaxMind Registration required to continue to use the GeoIP functionality!:

@BBcan177
Uninstalled pfBlockerNG and installed pfBlockerNG-devel 2.2.5_28. Ran update as follows:

 UPDATE PROCESS START [ 01/02/20 16:36:16 ]

===[  DNSBL Process  ]================================================

Saving DNSBL database... completed

Clearing all DNSBL Feeds completed
Reloading Unbound Resolver..... completed
DNSBL update [ 0 | PASSED  ]... completed
------------------------------------------------------------------------

===[  GeoIP Process  ]============================================

MaxMind Database downloading and processing ( approx 4MB ) ... Please wait ...

Download Process Starting [ 01/02/20 16:36:16 ]
 /usr/local/share/GeoIP/GeoLite2-Country.tar.gz		200 OK
 /usr/local/share/GeoIP/GeoLite2-Country-CSV.zip		200 OK
Download Process Ended [ 01/02/20 16:36:17 ]

Country code update Start
 Processing ISO IPv4 Continent/Country Data
 Processing ISO IPv6 Continent/Country Data [ 01/02/20 16:36:23 ]
 Creating pfBlockerNG Continent PHP files
 IPv4 Africa			 [ 01/02/20 16:36:24 ]
 IPv6 Africa			 [ 01/02/20 16:36:25 ]
 IPv4 Antarctica		
 IPv6 Antarctica		
 IPv4 Asia			
 IPv6 Asia			
 IPv4 Europe			
 IPv6 Europe			 [ 01/02/20 16:36:27 ]
 IPv4 North America		
 IPv6 North America		 [ 01/02/20 16:36:28 ]
 IPv4 Oceania			
 IPv6 Oceania			 [ 01/02/20 16:36:29 ]
 IPv4 South America		
 IPv6 South America		
 IPv4 Proxy and Satellite	
 IPv6 Proxy and Satellite	
 IPv4 Top Spammers		
 IPv6 Top Spammers		
 pfBlockerNG Reputation Tab
Country Code Update Ended



===[  IPv4 Process  ]=================================================

[ DNSBLIP_v4 ]			 Downloading update [ 01/02/20 16:36:29 ] .
[ DNSBLIP_v4 ] file_get_contents(/var/db/pfblockerng/DNSBLIP_v4.txt): failed to open stream: No such file or directory


 [ pfB_DNSBLIP_v4 - DNSBLIP_v4 ] Download FAIL
   Local File Failure


The Following List has been REMOVED [ DNSBLIP_v4 ]


===[  Aliastables / Rules  ]==========================================

No changes to Firewall rules, skipping Filter Reload
No Changes to Aliases, Skipping pfctl Update

 UPDATE PROCESS ENDED

Looks like an error with DNSBLIP?

~Doug

Having the same issue

fireodo · Jan 8, 2020, 12:44 PM

@bjurkovski said in pfBlockerNG MaxMind Registration required to continue to use the GeoIP functionality!:

@dougs said in pfBlockerNG MaxMind Registration required to continue to use the GeoIP functionality!:

@BBcan177
Uninstalled pfBlockerNG and installed pfBlockerNG-devel 2.2.5_28. Ran update as follows:

Looks like an error with DNSBLIP?

~Doug

Having the same issue

Maybe an Force Update can help?
Something else - I switched from pfblockerng to pfblockerng-devel an there is a increase of RAM usage from about 13% - is it also in your case?

Thanks,
fireodo

SteveITS · Jan 8, 2020, 8:45 PM

@teamits said in pfBlockerNG MaxMind Registration required to continue to use the GeoIP functionality!:

@BBcan177 , on pfBlockerNG, v2.1.4_20, it looks like if I open the plugin page (Firewall/pfBlockerNG) the MaxMind License Key field is blank. maxmind_key is populated in the saved config file, which I saved after entering it

I checked several times yesterday and the field had the key in it each time I logged in. On a hunch waited until overnight again, and this morning the field is blank in the GUI. Seems so unlikely but is there some way it could disappear overnight? If I export the config file this morning it's missing, compared to my last export 3 days ago:

<enable_log/>
<skipfeed>0</skipfeed>
<log_maxlines>20000</log_maxlines>
<maxmind_key>****</maxmind_key>
<maxmind_locale>en</maxmind_locale>
<database_cc/>
<inbound_interface>wan</inbound_interface>

vs

<enable_log/>
<maxmind_locale>en</maxmind_locale>
<database_cc/>
<skipfeed>0</skipfeed>
<log_maxlines>20000</log_maxlines>
<inbound_interface>wan</inbound_interface>

FWIW this is on an SG-4860 and it hasn't restarted in months.

MarcO42 · Jan 12, 2020, 1:29 PM

Hi,
just a quiston: If Idon't want to use GeoIP and set "Disable MaxMind CSV database Updates" checkbox I'm already get an notification every hour that "MaxMind need a license". Is there a way to block this spam without disabling the notification or uninistalling pfBlockerNG?
Cheers
Marco

BBcan177 · Jan 12, 2020, 1:29 PM

@MarcO42
You need to disable the "Action" settings in the GeoIP tab and any IPv4/6 aliases that use the "GeoIP" state for the notifications to stop.

christopa1999 · Jan 13, 2020, 5:59 AM

Instead of sign up Maxmind, can we use IP2Location database as replacement?

Sergei_Shablovsky · Jan 13, 2020, 6:59 AM

@christopa1999 said in pfBlockerNG MaxMind Registration required to continue to use the GeoIP functionality!:

Instead of sign up Maxmind, can we use IP2Location database as replacement?

Why avoid registration?
Just using MaxMind at this moment and after IP2locations integration ready, - just choose. ;)

jt · Jan 17, 2020, 5:10 PM

i followed the procedure and saved the registration key in our pfsense box, however, after ~1h I started to receive the email notifications again. when I checked back the box, the license key was missing. tried to put it again & save, same result. tried to generate a new key, no change.

does anyone know what might be wrong, please?

provels · Jan 17, 2020, 5:15 PM

@jt Did you do a Reload/Force?

BBcan177 · Jan 17, 2020, 6:50 PM

@jt
When you hit "save" did you get an error message... you probably didn't use the correct License key. Its only alpha-numeric with no spaces etc...

provels · Jan 17, 2020, 8:28 PM

@BBcan177 And the license key, not the token like the other guy did...

jt · Jan 17, 2020, 9:44 PM

i did do reload
i didn't get any error message
i did fill the license key, paste as plain text, the long number, not the short one (token)

still getting notifications :/

provels · Jan 17, 2020, 11:31 PM

@jt So your Key is a 16 char mixed-case alpha-numeric something like this?
dkhLGtU8fBz3v1nN
If so, I'd suggest getting a new Key.

jt · Jan 17, 2020, 11:33 PM

@provels yes, 16char mixed case alpha-numeric.
i did exactly that today - got a new key. same result.
funnily enough, out of 4 pfsense boxes we run, just a single one started to ask for the license.. :/