Could not open ISO

AlexK 0

Dear Sirs: When updating pfBlockerNG-devel 3.0.0_16, in a pfSense 2.5.2-RELEASE, we get the following output:

===[  GeoIP Process  ]============================================

MaxMind Database downloading and processing ( approx 4MB ) ... Please wait ...

Download Process Starting [ 08/31/21 08:43:39 ]
 /usr/local/share/GeoIP/GeoLite2-Country.tar.gz		200 OK
Download Process Ended [ 08/31/21 08:43:51 ]


Could not open ISO [ CN_v4 ]
Could not open ISO [ CN_rep_v4 ]
Could not open ISO [ RU_v4 ]
Could not open ISO [ RU_rep_v4 ]
---- output snipped ----

[ pfB_Top_v4 ]			 Changes found... Updating
[ pfB_Top_v4 ] Found no unique IPs, adding '127.1.7.7' to avoid empty file

Could not open ISO [ CN_v6 ]
Could not open ISO [ CN_rep_v6 ]
Could not open ISO [ RU_v6 ]
Could not open ISO [ RU_rep_v6 ]
---- output snipped ----

[ pfB_Top_v6 ]			 Changes found... Updating
[ pfB_Top_v6 ] Found no unique IPs, adding '::127.1.7.7' to avoid empty file
-----------------------------------------------------------------------------------------------------

We have still another old pfSense 2.4.4-RELEASE-p3 and when going to: Firewall > pfBlockerNG > GeoIP we are still able to block countries individually, but in this new pfSense 2.5.2-RELEASE we are unable to to this anymore, may be due to the errors above noted?

Returning to the new server with pfSense 2.5.2-RELEASE descriptions, the database file downloads correctly to:
/usr/local/share/GeoIP/GeoLite2-Country.tar.gz and has the following
content:

Directory: /usr/local/share/GeoIP/

drwxrwxr-x 2 user user    4096 Aug 23 14:52 .
drwxr-xr-x 3 user user    4096 Aug 31 08:30 ..
-rw-r--r-- 1 user user      55 Aug 23 14:52 COPYRIGHT.txt
-rw-r--r-- 1 user user 7102695 Aug 23 14:52 GeoLite2-Country.mmdb
-rw-r--r-- 1 user user     398 Aug 23 14:52 LICENSE.txt

There is not a /usr/local/share/GeoIP/cc/ directory with files to specify the countries in another way here: Firewall > pfBlockerNG > IP > IPv4 > Add > Format: GeoIP, Source (example): /usr/local/share/GeoIP/cc/US_v4.txt

When we go to Firewall > pfBlockerNG> IP > MaxMind GeoIP configuration > after the MaxMind License Key
(we are using a free account), there is a message:

"To utilize the MaxMind GeoIP functionality, you must first register for a free MaxMind user account. Visit the following Link: https://www.maxmind.com/en/geolite2/signup to Register for a free MaxMind user account. Utilize the GeoIP Update version 3.1.1 or newer registration option."

We are using a free MaxMind user account. We do not understand how to utilize the GeoIP Update version 3.1.1 or newer registration option. We created a new user account at MaxMind, and MaxMind newer asked us for the version.

We saw in postings in this forum error messages about: "Could not open ISO" here:
https://forum.netgate.com/topic/149343/pfblockerng-maxmind-registration-required-to-continue-to-use-the-geoip-functionality/29
but it is for a old version, no help

In another posting, recommended to use pfBlockerNG-devel. Yes, we are using pfBlockerNG-devel 3.0.0_16. We ran: "ls -lah /usr/local/share/GeoIP/" and reloaded, same error messages as above.

How can be solve this ? Any other information you needed, ask for it. Thanks in advance

SteveITS

@alexk-0 said in Could not open ISO:

We do not understand how to utilize the GeoIP Update version 3.1.1

When you log in to your MaxMind account and create a license key, there is a radio button for which version to use. See the sticky post.

AlexK 0

@steveits We created the new key with your instructions. We also changed after the key, the field: MaxMind CSV Updates. Cleared: Check to disable MaxMind CSV updates. And after updating, the download directory /usr/local/share/GeoIP/cc/ populated with files and can select the countries. Problem solved, thank you Steve!