pfBlockerNG DNSBL service wont start

[blackops786187]

Hi,

Ive installed PFblockerng and the pfBlockerNG DNSBL service will not start. I've re-installed it whilst disabling the keep settings option. I've done a force reload all and restarted pfsense and it wont start up

The weird thing is that once im connected onto my openvpn connection, ads are being blocked even when the DNSBL is disabled

Can someone provide me with some further troubleshooting methods to solve this?

Thanks

[Gertjan]

Hummmm.
Can't see anything from here.

You looked here :

?

[blackops786187]

in the error.log im seeing this. (Certificate issue i think)

**[ DNSBL_EasyList - EasyList ] Download FAIL [ 06/09/20 21:35:09 ]
Firewall and/or IDS (Legacy mode only) are not blocking download.

[ DNSBL_EasyList - EasyPrivacy ] Download FAIL [ 06/09/20 21:35:24 ]
Firewall and/or IDS (Legacy mode only) are not blocking download.**

this is the pfblocker log. Cant see any errors besides the lists not downloading

https://pastebin.com/cM5eSys7

[taz3146]

Same issue, Curl SSL errors out on 2.4.4 before update and continues on 2.4.5-p1. the difference here it keeps reusing the old list it already had from before 5/30/2020 and looks like it's been broken since that date. below is snip from the log

[ easylistads ]
			Previous download failed.	Re-attempt download
 UPDATE PROCESS START [ 06/10/20 20:00:01 ]

===[  DNSBL Process  ]================================================

[ easylistads ]		 Downloading update . cURL Error: 60
SSL certificate problem: certificate has expired Retry in 5 seconds...
. cURL Error: 60
SSL certificate problem: certificate has expired Retry in 5 seconds...
. cURL Error: 60
SSL certificate problem: certificate has expired Retry in 5 seconds...
.. unknown http status code 

 [ DNSBL_easylistads - easylistads ] Download FAIL [ 06/10/20 20:00:17 ]
  Firewall and/or IDS are not blocking download.

  Restoring previously downloaded file

EDIT** I just spotted the issue, look at the remote timestamp date, it appears the server had a date roll over issue, I seen it on some other lists also, which appear to have been fixed. 4 hours prior to that it synced and updated normally

[ easylistads ]
  Remote timestamp: Thu, 01 Jan 1970 00:00:00 GMT
  Local  timestamp: Sat, 30 May 2020 07:51:04 GMT	Update found
 UPDATE PROCESS START [ 05/30/20 08:00:11 ]

[RonpfS]

Change the State of the URL to Flex

[Cool_Corona]

@RonpfS Doesnt work.

[RonpfS]

Can you open that URL in your browser ?

[taz3146]

@RonpfS
good catch, that worked and the list updated. it fails initially, retries with flex ssl downgrade and succeeds
I forgot that was even an option.
new snip of log below

[ easylistads ]		 Downloading update . cURL Error: 60

[ ! ] Downgrading SSL settings (Flex) . 200 OK.

[Cool_Corona]

@RonpfS Yes.

[blackops786187]

used flex to remove the download errors but the service refuses to start. im still getting adblocking on the vpn so it seems to be working but not sure if the functionality is impaired or not