Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    GeoIP Process in log blank

    Scheduled Pinned Locked Moved pfBlockerNG
    12 Posts 4 Posters 1.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • GPinzoneG
      GPinzone
      last edited by

      I created a license key with MaxMind and configured pfBlockerNG-devel 3.1.0_4 with the key. The log doesn't display for "GeoIP Process" shows anything after a restart/update. I'm not getting an error, but I'm also not getting any confirmation.

      S 1 Reply Last reply Reply Quote 0
      • S
        SteveITS Galactic Empire @GPinzone
        last edited by

        @gpinzone On the General tab is "pfBlockerNG" checked to Enable? I've missed that once or twice.

        What does the log show when you run an update?

        Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
        When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
        Upvote 👍 helpful posts!

        GPinzoneG 1 Reply Last reply Reply Quote 0
        • GPinzoneG
          GPinzone @SteveITS
          last edited by GPinzone

          @steveits Here's a snippet:

          ===[  DNSBL Process  ]================================================
          
           Loading DNSBL Statistics... completed
           Loading DNSBL SafeSearch...  disabled
           Loading DNSBL Whitelist... completed
          
          [ StevenBlack_ADs ]		 exists.
          
          ===[  GeoIP Process  ]============================================
          
          
          ===[  IPv4 Process  ]=================================================
          
          [ Abuse_Feodo_C2_v4 ]		 Downloading update .. 200 OK. completed ..
            ------------------------------
            Original Master     Final     
            ------------------------------
            101      94         94          [ Pass ] 
            -----------------------------------------------------------------
          

          As you can see, the GeoIP Process section is blank. No errors or any information.

          S 1 Reply Last reply Reply Quote 0
          • S
            SteveITS Galactic Empire @GPinzone
            last edited by

            @gpinzone On mine it shows only for the countries set up on the GeoIP tab:

            ===[ GeoIP Process ]============================================

            [ pfB_Africa_v4 ] exists.
            [ pfB_Antarctica_v4 ] exists.
            [ pfB_Asia_v4 ] exists.

            ...even though I have "feeds" set up for specific countries on the IPv4 tab using format=GeoIP.

            Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
            When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
            Upvote 👍 helpful posts!

            GPinzoneG 1 Reply Last reply Reply Quote 0
            • GPinzoneG
              GPinzone @SteveITS
              last edited by

              @steveits Here's my settings:

              GeoIP.png

              I would assume SOMETHING should be showing up in the logs.

              S 1 Reply Last reply Reply Quote 0
              • S
                SteveITS Galactic Empire @GPinzone
                last edited by

                @gpinzone Not sure what to suggest. Maybe add some other thing like an Alias Native (which doesn't block anything) for a country and then run a force update?

                Brute force method would be to uncheck the "Keep Settings" option, uninstall, and install/reconfigure.

                Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                Upvote 👍 helpful posts!

                GPinzoneG 1 Reply Last reply Reply Quote 0
                • the otherT
                  the other
                  last edited by the other

                  Hey there,
                  just an idea: did you select any countries from the Top Spammers list at all?
                  Also: when action is disabled then (on my machine) there will be no update, it seems to be ignored.

                  So, make sure you indeed selected at least one country from the list and try again.

                  Another thought (not mine, pfsense points that way): do you really need all those IP blockings? Any services offered to the internet? Since pfsense in default mode blocks all incoming on WAN anyways, as long as you haven't opened any ports for whatever services in your LAN reachable from outside, you might not need that at all (or just a few for let's say your own VPN server, here I get almost no connection try-outs from anywhere since i only allowed incoming from europe...the rest of the world is blocked). So one list is (for my usercase) enough.
                  jm2c
                  ;)

                  the other

                  pure amateur home user, no business or professional background
                  please excuse poor english skills and typpoz :)

                  1 Reply Last reply Reply Quote 1
                  • GPinzoneG
                    GPinzone @SteveITS
                    last edited by GPinzone

                    @the-other Ha! You got it!

                    ===[  GeoIP Process  ]============================================
                    
                    [ pfB_Top_v4 ]			 Changes found... Updating
                      ------------------------------
                      Original Master     Final     
                      ------------------------------
                      175465   175465     175465      [ Pass ] 
                      -----------------------------------------------------------------
                    
                    

                    In my defense, look at the following:

                    Countries.png

                    All the entries on the left are selected. All the entries on the right are not. I gotta say the pfSense UI should be modified to make it easier to tell what is and what isn't selected.

                    the otherT S 2 Replies Last reply Reply Quote 0
                    • the otherT
                      the other @GPinzone
                      last edited by the other

                      @gpinzone
                      nice, glad i could point in the right direction...
                      :)

                      edit: since your ISP does not support any ipv6 (as you mentioned in another post) there should be no need to select from right side entries (and again: WAN blocks all that anyways out of the box as it comes with deny ALL).
                      Remember that you usually go easier when there are not too many entries selected you might not need at all...)

                      the other

                      pure amateur home user, no business or professional background
                      please excuse poor english skills and typpoz :)

                      1 Reply Last reply Reply Quote 0
                      • S
                        SteveITS Galactic Empire @GPinzone
                        last edited by

                        @gpinzone Ah. The not-dark theme is easier to see that difference...

                        Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                        When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                        Upvote 👍 helpful posts!

                        the otherT 1 Reply Last reply Reply Quote 1
                        • the otherT
                          the other @SteveITS
                          last edited by

                          @steveits
                          it's personal choice, so no offense to anyone, but i never understood the dark-theme hype in general...
                          sure: some gui is easier on your eyes in dark mode, but the HYPE (software sux cause no dark-mode available discussions) around it...well...
                          ;)

                          the other

                          pure amateur home user, no business or professional background
                          please excuse poor english skills and typpoz :)

                          johnpozJ 1 Reply Last reply Reply Quote 0
                          • johnpozJ
                            johnpoz LAYER 8 Global Moderator @the other
                            last edited by

                            @the-other said in GeoIP Process in log blank:

                            HYPE (software sux cause no dark-mode available discussions) around it.

                            Yeah some people can go nuts over some silly shit for sure ;)

                            I like dark on a few sites, other sites not - I use dark here, but the pfsense gui I just have it on the standard theme, I don't personally like the dark on pfsense.

                            Really only reason I switch to dark on forum was it was easier to spot spammers trying to hide links ;)

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.