Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Whitelisting From Alerts Page Not Working

    pfBlockerNG
    3
    15
    613
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • ToTalChaos1010
      ToTalChaos1010 last edited by ToTalChaos1010

      pfBlocker 2.1.4_12
      pfSense 2.4.4-RELEASE (amd64)

      Attempting to add a DNSBL whitelist (used apple.com as an example) entry from the alerts page using the <+>:

      Receive yellow banner at top:
      Removed - Domain|CNAME(s) | iadsdk.apple.com | iadsdk.apple.com.edgekey.net | e4805.a.akamaiedge.net | from Unbound Resolver DNSBL. You may need to flush your browsers DNS Cache

      However, I receive a <pfSense is restoring the configuration /cf/conf/backup/config-1538140572.xml>, and the entry does not show up in the whitelist

      Manual entry works once a DNSBL Reload is completed.

      If not a known issue, could anyone provide direction on how to troubleshoot?

      1 Reply Last reply Reply Quote 0
      • BBcan177
        BBcan177 Moderator last edited by

        @totalchaos1010 said in Whitelisting From Alerts Page Not Working:

        However, I receive a <pfSense is restoring the configuration /cf/conf/backup/config-1538140572.xml>, and the entry does not show up in the whitelist

        Maybe there is another configuration outside of the package that is causing this issue... Try to save changes to any other pfSense configuration and see if the error repeats?

        ToTalChaos1010 1 Reply Last reply Reply Quote 0
        • ToTalChaos1010
          ToTalChaos1010 @BBcan177 last edited by

          @bbcan177 said in Whitelisting From Alerts Page Not Working:

          Try to save changes to any other pfSense configuration and see if the error repeats?

          Thank you for the prompt response. Not sure how I would save to another pFsense config. Do you mean a whole other setup?

          I have a 40 line custom whitelist that I created using the alerts page over the course of a year. Recently did the 2.4.4 upgrade, and just today the pfblocker upgrade. Same packages have remained within this last year. Nothing really has changed.

          Also, recently just noticed that the domain on the alerts page now shows that it is whitelisted, however not in the custom whitelist. Could this be a permissions issue?

          Again thank you for you response and guidance.

          1 Reply Last reply Reply Quote 0
          • BBcan177
            BBcan177 Moderator last edited by

            @totalchaos1010 said in Whitelisting From Alerts Page Not Working:

            Thank you for the prompt response. Not sure how I would save to another pFsense config. Do you mean a whole other setup?
            I have a 40 line custom whitelist that I created using the alerts page over the course of a year. Recently did the 2.4.4 upgrade, and just today the pfblocker upgrade. Same packages have remained within this last year. Nothing really has changed.
            Also, recently just noticed that the domain on the alerts page now shows that it is whitelisted, however not in the custom whitelist. Could this be a permissions issue?
            Again thank you for you response and guidance.

            When you whitelist a domain from the Alerts Tab, it removes the domain from the database, and then saves to the whitelist. So the first part seems to have executed, but the last part which is saving to the whitelist failed.

            Do you have any errors in pfSense system.log? Its hard to diagnose without some more details. Are you experiencing any other issues in this box?

            1 Reply Last reply Reply Quote 0
            • ToTalChaos1010
              ToTalChaos1010 last edited by

              Seems the errors in the system log may help:

              Sep 28 10:17:04 php-fpm 32174 /pfblockerng/pfblockerng_alerts.php: New alert found: pfSense is restoring the configuration /cf/conf/backup/config-1538144167.xml
              Sep 28 10:17:04 php-fpm 32174 /pfblockerng/pfblockerng_alerts.php: pfSense is restoring the configuration /cf/conf/backup/config-1538144167.xml
              Sep 28 10:17:04 php-fpm 32174 /pfblockerng/pfblockerng_alerts.php: XML error: XML_ERR_NAME_REQUIRED at line 3659 in /conf/config.xml

              and a few:
              Sep 28 10:40:43 dhcpleases Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.

              1 Reply Last reply Reply Quote 0
              • BBcan177
                BBcan177 Moderator last edited by

                @totalchaos1010 said in Whitelisting From Alerts Page Not Working:

                pfBlocker 2.1.4_12
                pfSense 2.4.4-RELEASE (amd64)

                Can you upgrade to the pfBlockerNG-devel version?

                ToTalChaos1010 1 Reply Last reply Reply Quote 0
                • ToTalChaos1010
                  ToTalChaos1010 @BBcan177 last edited by

                  @bbcan177 said in Whitelisting From Alerts Page Not Working:

                  @totalchaos1010 said in Whitelisting From Alerts Page Not Working:

                  pfBlocker 2.1.4_12
                  pfSense 2.4.4-RELEASE (amd64)

                  Can you upgrade to the pfBlockerNG-devel version?

                  Think I'll stick with the stable version and manually add for the time being. Thanks for the feedback.

                  1 Reply Last reply Reply Quote 0
                  • M
                    mloiterman last edited by

                    I’m having the exact same issue.

                    I’m on the same versions of pfsense and pfblocker.

                    I can manually add without issue.

                    I too would rather not use a development build because I don’t want to deal with unpredictable bugs...which is kind of what I have here, so...

                    1 Reply Last reply Reply Quote 0
                    • BBcan177
                      BBcan177 Moderator last edited by

                      I have posted a PR which will fix this issue here:
                      https://github.com/pfsense/FreeBSD-ports/pull/577/files

                      Just waiting for the devs to review and merge.

                      You can manually edit this file: /usr/local/www/pfblockerng/pfblockerng_alerts.php and comment out Line #82 with // (prefix two slashes to that line)

                      https://github.com/pfsense/FreeBSD-ports/blob/devel/net/pfSense-pkg-pfBlockerNG/files/usr/local/www/pfblockerng/pfblockerng_alerts.php#L82

                      1 Reply Last reply Reply Quote 0
                      • M
                        mloiterman last edited by

                        Thanks for fast follow up!

                        1 Reply Last reply Reply Quote 0
                        • BBcan177
                          BBcan177 Moderator last edited by

                          @mloiterman said in Whitelisting From Alerts Page Not Working:

                          Thanks for fast follow up!

                          It has been merged. Let me know if you have any other issues... Thanks!

                          1 Reply Last reply Reply Quote 0
                          • M
                            mloiterman last edited by

                            My only question is how to get the fix apart from making the change myself or using a dev build? Am I waiting for an update to the pfblocker pkg?

                            BBcan177 1 Reply Last reply Reply Quote 0
                            • BBcan177
                              BBcan177 Moderator @mloiterman last edited by BBcan177

                              @mloiterman There should be a new version posted for pfBlockerNG. Update to 2.1.4_17.

                              Might need to run pkg update -f from the shell.

                              1 Reply Last reply Reply Quote 0
                              • ToTalChaos1010
                                ToTalChaos1010 last edited by

                                @BBcan177
                                Thanks for the fix. Confirmed working, on my end.

                                1 Reply Last reply Reply Quote 0
                                • M
                                  mloiterman last edited by

                                  Thanks, works perfectly now.

                                  1 Reply Last reply Reply Quote 0
                                  • First post
                                    Last post

                                  Products

                                  • Platform Overview
                                  • TNSR
                                  • pfSense
                                  • Appliances

                                  Services

                                  • Training
                                  • Professional Services

                                  Support

                                  • Subscription Plans
                                  • Contact Support
                                  • Product Lifecycle
                                  • Documentation

                                  News

                                  • Media Coverage
                                  • Press
                                  • Events

                                  Resources

                                  • Blog
                                  • FAQ
                                  • Find a Partner
                                  • Resource Library
                                  • Security Information

                                  Company

                                  • About Us
                                  • Careers
                                  • Partners
                                  • Contact Us
                                  • Legal
                                  Our Mission

                                  We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

                                  Subscribe to our Newsletter

                                  Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

                                  © 2021 Rubicon Communications, LLC | Privacy Policy