Disable action does not work ?

chudak

@ronpfs said in Disable action does not work ?:

@chudak Maybe post pfblockerng.log, we can see much without that.

https://pastebin.ubuntu.com/p/SHnvfgm2xN/

Please take a look !
Thx!

RonpfS

@chudak Did you ran a Force Update or a Force Reload All after disabling the GeoIP group?

chudak

@ronpfs said in Disable action does not work ?:

@chudak Did you ran a Force Update or a Force Reload All after disabling the GeoIP group?

Yes

RonpfS

@chudak So you ran both ? timestamp of the Force Update ?

chudak

@ronpfs

You know I need to play with a bit and produce a good log. Will update later.

Thx for looking !

RonpfS

@chudak said in Disable action does not work ?:

You know I need to play with a bit and produce a good log. Will update later.
Thx for looking !

Start by enable only on GeoIP group check if things change with a Force Update, then run a Force Reload IP or ALL.

Disable that GeoIP group, Update, Reload IP.

chudak

@ronpfs

It looks like it was my bad and disable in fact does work.

My apologies !

Can I ask you kinda related-unrelated question.

When I look at my Whitelist I see:

and corresponding FW rule:

Do White_List_hosts and White_List_ports have to be used? Can they be removed ?

RonpfS

@chudak said in Disable action does not work ?:

Do White_List_hosts and White_List_ports have to be used? Can they be removed ?

When was this settings configured ? Look at both aliases to see if they are still relevant.

chudak

@ronpfs said in Disable action does not work ?:

When was this settings configured ? Look at both aliases to see if they are still relevant.

The problem is I don;t actually remember when and how :)

So I'd say no need for them. But when I try to disable "Custom DST Port" and "Custom Destination" and Save I get:

???

What do you see there ?

RonpfS

@chudak Strange. You are sure you untick both boxes, save, etc ?

chudak

@ronpfs said in Disable action does not work ?:

@chudak Strange. You are sure you untick both boxes, save, etc ?

Yup, unchecked both and on save that error.

Do you have aliases in tee WL?

RonpfS

@chudak And you did that in the Whitelist group ? not with the FW rules.
I do have a Whitelist rules with both boxes unticked, maybe empty the field also.

chudak

@ronpfs

Not sure what you call "the Whitelist group"
I have it in my IPv4 list

Tried emptying as well with no love

RonpfS

@chudak said in Disable action does not work ?:

Not sure what you call "the Whitelist group"

Permit group ....

chudak

@ronpfs said in Disable action does not work ?:

@chudak said in Disable action does not work ?:

Not sure what you call "the Whitelist group"

Permit group ....

is Permit group different from my ?
where is the Permit group ?

RonpfS

@chudak Well you have a Group Whitelist for IP permit both. Mine is permit Outbound.

chudak

@ronpfs said in Disable action does not work ?:

@chudak Well you have a Group Whitelist for IP permit both. Mine is permit Outbound.

ok i see, seems like the same then

chudak

@ronpfs

are you on pfBlockerNG-devel 3.0.0_16 ?

RonpfS

@chudak With permit both, the FW rules requires Custom port/dest settings, this is a requirement from pfSense, nothing to do with pfBlockerNG.

With permit Outbound that requirements isn't needed. Check the forum for similar issues.

chudak

@ronpfs said in Disable action does not work ?:

@chudak With permit both, the FW rules requires Custom port/dest settings, this is a requirement from pfSense, nothing to do with pfBlockerNG.

With permit Outbound that requirements isn't needed. Check the forum for similar issues.

copy that

what do you have ?