Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Unable to edit GeoIP Links

    Scheduled Pinned Locked Moved pfBlockerNG
    23 Posts 6 Posters 2.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      Stewart
      last edited by Stewart

      On a firewall with pfSense 2.4.4-p3 I've uninstalled pfBlockerNG and installed pfBlockerNG-devel. When I go to the IP -> GeoIP it requires the MaxMind key. Fair enough. I get the key and put it into the IP page and then run a force Update to All. Now, when I go into IP -> GeoIP it no longer asks for the key but I'm unable to edit any pages.

      b1af41c5-cc73-472a-a61f-3ed8c0997775-image.png

      As a precaution I went to the General Page and told it not to save settings on reinstallation and then reinstalled the package. I again put the MaxMind key in but still the same issue. Also, the php pages aren't being generated and I get a 404 if I try to manually go to them (which makes sense since they aren't there).

      /usr/local/www/pfblockerng: ls -lah
      total 4452
      drwxr-xr-x   3 root  wheel   1.5K Feb 24 14:24 .
      drwxr-xr-x  19 root  wheel   9.0K Feb 24 14:24 ..
      -rw-r--r--   1 root  wheel   7.1K Feb  7 09:33 pfBlockerNG.js
      -rw-r--r--   1 root  wheel    94K Feb  7 09:33 pfblockerng.php
      -rw-r--r--   1 root  wheel   108K Feb  7 09:33 pfblockerng_alerts.php
      -rw-r--r--   1 root  wheel   3.8M Feb  7 09:33 pfblockerng_asn.txt
      -rw-r--r--   1 root  wheel    15K Feb  7 09:33 pfblockerng_blacklist.php
      -rw-r--r--   1 root  wheel    17K Feb  7 09:33 pfblockerng_category.php
      -rw-r--r--   1 root  wheel    48K Feb  7 09:33 pfblockerng_category_edit.php
      -rw-r--r--   1 root  wheel    38K Feb  7 09:33 pfblockerng_dnsbl.php
      -rw-r--r--   1 root  wheel    52K Feb  7 09:33 pfblockerng_feeds.json
      -rw-r--r--   1 root  wheel    27K Feb  7 09:33 pfblockerng_feeds.php
      -rw-r--r--   1 root  wheel    16K Feb  7 09:33 pfblockerng_general.php
      -rw-r--r--   1 root  wheel    18K Feb  7 09:33 pfblockerng_ip.php
      -rw-r--r--   1 root  wheel    15K Feb  7 09:33 pfblockerng_log.php
      -rw-r--r--   1 root  wheel   8.1K Feb  7 09:33 pfblockerng_sync.php
      -rw-r--r--   1 root  wheel    17K Feb  7 09:33 pfblockerng_threats.php
      -rw-r--r--   1 root  wheel    17K Feb  7 09:33 pfblockerng_update.php
      drwxr-xr-x   2 root  wheel   512B Feb 24 14:24 www
      
      

      Is something disabled? Am I missing something?

      Edit, this is what the relevant section of the logs show from the Reload:

      New DNSBL certificate created
      Restarting DNSBL Service
      
      ===[  GeoIP Process  ]============================================
      
      
      ===[  IPv4 Process  ]=================================================
      
      [ Abuse_Feodo_C2_v4 ]		 Downloading update [ 02/24/20 14:29:46 ] .. 200 OK. completed ..
        ------------------------------
        Original Master     Final     
        ------------------------------
        867      867        867         [ Pass ] 
        -----------------------------------------------------------------
      
      [ Abuse_IPBL_v4 ]		 Downloading update [ 02/24/20 14:29:47 ] .. 200 OK. completed ..
        Empty file, Adding '127.1.7.7' to avoid download failure.
        ------------------------------
        Original Master     Final     
        ------------------------------
        0        1          1           [ Pass ] 
        -----------------------------------------------------------------
      
      NollipfSenseN BBcan177B 2 Replies Last reply Reply Quote 0
      • NollipfSenseN
        NollipfSense @Stewart
        last edited by NollipfSense

        @Stewart So, are you saying yours don't have the edit tool on the right like here? When you applied the key and saved...did the WebGUI acknowledged the success?

        Screen Shot 2020-02-24 at 4.15.57 PM.png

        pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
        pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

        1 Reply Last reply Reply Quote 0
        • BBcan177B
          BBcan177 Moderator @Stewart
          last edited by BBcan177

          @Stewart said in Unable to edit GeoIP Links:

          On a firewall with pfSense 2.4.4-p3 I've uninstalled pfBlockerNG and installed pfBlockerNG-devel. When I go to the IP -> GeoIP it requires the MaxMind key. Fair enough. I get the key and put it into the IP page and then run a force Update to All. Now, when I go into IP -> GeoIP it no longer asks for the key but I'm unable to edit any pages.

          Review the pfblockerng.log and extras.log... It does't look like MaxMind installed correctly. The edit button is not accessible until the MaxMind Key is entered, and the GeoIP Country files are created.

          You can run this command to manually download the MaxMind DB:

          php -f /usr/local/www/pfblockerng/pfblockerng.php dc
          

          "Experience is something you don't get until just after you need it."

          Website: http://pfBlockerNG.com
          Twitter: @BBcan177  #pfBlockerNG
          Reddit: https://www.reddit.com/r/pfBlockerNG/new/

          1 Reply Last reply Reply Quote 0
          • S
            Stewart
            last edited by

            I think it's because that key has been used before as I found in the log that I'm getting a "401 Unauthorized". Is there anything stating how many devices are allowed to use the same key?

            NollipfSenseN 1 Reply Last reply Reply Quote 0
            • NollipfSenseN
              NollipfSense @Stewart
              last edited by

              @Stewart said in Unable to edit GeoIP Links:

              I think it's because that key has been used before as I found in the log that I'm getting a "401 Unauthorized". Is there anything stating how many devices are allowed to use the same key?

              The key is still yours and good...when you added the key, did you the green text stating successfully added? When you add the key, there cannot be any space to the left or right of the 16digit key for it to be successfully added.

              pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
              pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

              S 1 Reply Last reply Reply Quote 0
              • S
                Stewart @NollipfSense
                last edited by

                @NollipfSense I get no text saying it worked or otherwise. I've copied and pasted it directly from a unit that is working properly. No spaces on either side.

                NollipfSenseN 1 Reply Last reply Reply Quote 0
                • NollipfSenseN
                  NollipfSense @Stewart
                  last edited by NollipfSense

                  @Stewart said in Unable to edit GeoIP Links:

                  @NollipfSense I get no text saying it worked or otherwise. I've copied and pasted it directly from a unit that is working properly. No spaces on either side.

                  It seems that it wasn't added. Add it again, then SAVE...wait, the page will reload. If you copied it from another unit and that unit is live on your network that might explain the error.

                  pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
                  pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

                  1 Reply Last reply Reply Quote 0
                  • RonpfSR
                    RonpfS
                    last edited by

                    Go to the maxmind site and see what devices downloaded the data.

                    2.4.5-RELEASE-p1 (amd64)
                    Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
                    Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

                    1 Reply Last reply Reply Quote 0
                    • S
                      Stewart
                      last edited by

                      I logged in and it showed no license keys. Somehow my existing key was removed or deleted? I generated a new one and it's completely different. The last one was 32 characters long, all uppercase letters and numbers. This new one is 16 characters long, uppercase and lowercase letters along with numbers. What format are other people's keys in?

                      NollipfSenseN 1 Reply Last reply Reply Quote 0
                      • RonpfSR
                        RonpfS
                        last edited by

                        16 characters long is the right format.

                        2.4.5-RELEASE-p1 (amd64)
                        Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
                        Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

                        1 Reply Last reply Reply Quote 0
                        • NollipfSenseN
                          NollipfSense @Stewart
                          last edited by

                          @Stewart You're the first to get a 32bits key...congrats...how did you managed that! When you add the new key then saved, be sure you get the green success bar at the top of the page when it reloads.

                          pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
                          pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

                          S 1 Reply Last reply Reply Quote 0
                          • S
                            Stewart
                            last edited by

                            That is so bizarre! That 32 character key worked fine in the first 2 units. Now it's not even in my account. I guess I'll go through and create a key for each unit, then?

                            1 Reply Last reply Reply Quote 0
                            • RonpfSR
                              RonpfS
                              last edited by

                              There was a 32 bits Token generated when creating the account.

                              2.4.5-RELEASE-p1 (amd64)
                              Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
                              Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

                              1 Reply Last reply Reply Quote 0
                              • S
                                Stewart @NollipfSense
                                last edited by

                                @NollipfSense Well, I don't get the success bar, but I do get an error message if the key isn't valid. The 32 character key doesn't flag an error when I put it in but no longer works to actually authenticate. The 16-character keys I'm putting in work for both so I'm just generating a new key for each unit.

                                NollipfSenseN 1 Reply Last reply Reply Quote 0
                                • NollipfSenseN
                                  NollipfSense @Stewart
                                  last edited by NollipfSense

                                  @Stewart said in Unable to edit GeoIP Links:

                                  I do get an error message if the key isn't valid.

                                  When that happens, put the cursor in the box with the key and delete any space to the left and right of the key...then save.

                                  pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
                                  pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

                                  S 1 Reply Last reply Reply Quote 0
                                  • S
                                    Stewart @NollipfSense
                                    last edited by

                                    @NollipfSense Right. No, I get it. I'm just saying there isn't a message if the key is successful, only if I put in something invalid. You said to check for the green success bar but I don't get that. I only get the message if it's invalid.

                                    NollipfSenseN 1 Reply Last reply Reply Quote 0
                                    • NollipfSenseN
                                      NollipfSense @Stewart
                                      last edited by

                                      @Stewart Whenever you enter a new configuration item then save, the page reloads with a green bar letting one know the configuration was successfully applied just like when there is an error imputing a config item one gets the red bar.

                                      So, you're all set now?

                                      pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
                                      pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

                                      S 1 Reply Last reply Reply Quote 0
                                      • S
                                        Stewart @NollipfSense
                                        last edited by

                                        @NollipfSense Interesting. Yes I'm all set. I just don't get that status bar on any of my units on success, only on fail. Oh well, it's working. Thanks for the assistance.

                                        1 Reply Last reply Reply Quote 0
                                        • S
                                          Stewart
                                          last edited by

                                          Maybe not. I was just checking the lists to edit but if I run an update I get:

                                          MaxMind Database downloading and processing ( approx 4MB ) ... Please wait ...
                                          
                                          Download Process Starting [ 02/25/20 14:34:14 ]
                                           /usr/local/share/GeoIP/GeoLite2-Country.tar.gz		401 Unauthorized
                                          
                                          Failed to Download GeoLite2-Country.mmdb
                                           /usr/local/share/GeoIP/GeoLite2-Country-CSV.zip		200 OK
                                          Download Process Ended [ 02/25/20 14:34:16 ]
                                          

                                          Is that right? It lets me edit the lists now but I'm only authorized for 1 of the 2?

                                          NollipfSenseN RonpfSR J 3 Replies Last reply Reply Quote 0
                                          • NollipfSenseN
                                            NollipfSense @Stewart
                                            last edited by

                                            @Stewart I really don't use it so I don't know how many list one's allowed...I would guess since its free that there might be limitations especially now that registration required.

                                            pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
                                            pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.