SG3100 + pfBlockerNG-devel ?

mudmanc4

There is a ton of info out there concerning ARM / pfBlocker, which has appeared to have gone dark with 21.02.2

I don't want to update to find out if there has or has not been resolution to this issue, if anyone can tell me where this stands I would appreciate it.

My 3100's are still on 2.4.5-p1
They rely on pfBlockerNG-devel

bmeeks

No resolution for the issues with PHP on 32-bit ARM hardware. So that means both pfBlockerNG and the Snort and Suricata packages will crash. Also probably some others that use certain PHP features.

NOCling

I run my SG-3100 with 21.02.2 since release, pfBlockerNG Dev 3.0.0_16 run nice and stable.

But i dont use Snort or Suricata. No PHP crash so far.

mcury

@nocling Did you reboot the SG-3100 after installing pfBlockerNG?

NOCling

I upgrade from 2.4.5p1, after the Packages all upgradet unter 21.02.2, i have to reboot to run NUT.

mcury

@nocling I'll try to install it right now.. using the wizard and default settings..

mcury

@nocling hmmm, it's working for me, I can't believe.. :)
Maybe because of the number of feeds that the version 3.0.0_16 is using?
It's a considerable lower number of feeds than the previous version.

SteveITS

@mudmanc4 Here is the redmine bug report so you can follow it.

re: what triggers it, from the report certain orders of preg_match() calls can. It seems apparent that the pfSense GUI does not as everything I've seen is in regards to packages. Perhaps the feeds used (variable size) make a difference?

mcury

@steveits said in SG3100 + pfBlockerNG-devel ?:

@mudmanc4 Here is the redmine bug report so you can follow it.

re: what triggers it, from the report certain orders of preg_match() calls can. It seems apparent that the pfSense GUI does not as everything I've seen is in regards to packages. Perhaps the feeds used (variable size) make a difference?

So far so good.

SG-3100 - 21.02p2 - Clean install

Actions taken in pfblockerNG

1 - Wizard
2 - Maxmind key set
3 - MaxMind Localized Language changed to Brazilian portuguese
Not using geoIP yet, planning to.

4 - Feeds

Noticed that only one DNSBL was in use, ADs_Basic, so I added the following:
. EasyList
. EasyList_Portuguese
. EasyPrivacy

5 - Changed DNSBL Mode to Unbound python mode
6 - Unchecked DNS Reply Logging because I don't need it