• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

ASN lookup failing with empty files [solved]

Scheduled Pinned Locked Moved pfBlockerNG
solved
12 Posts 2 Posters 1.5k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • L
    lohphat
    last edited by johnpoz Nov 10, 2022, 8:09 PM Nov 8, 2022, 10:56 PM

    I just noticed the custom ASN lookups I have are failing.

    When I run a manual lookup it works. So something in the update code is failing?

    https://asnlookup.com/asn/AS15169/

    From the pfBLockerNG-devel help text:

    ASN:
        Convert an ASN into its respective IP addresses.
        ASN list via cidr-report.org (autocomplete form - 3 character minimum)
    

    Maybe the API changed?

    -----------------------------------------------------------------
    
    [ AS13335_v4 ]			 Reload . completed ..
    
    [ AS15169_v4 ]			 Reload [ 11/8/22 17:52:55 ] . completed ..
     Empty file, Adding '127.1.7.7' to avoid download failure.
    
    [ AS16509_v4 ]			 Reload . completed ..
     Empty file, Adding '127.1.7.7' to avoid download failure.
    
    [ AS15169_v4 ]			 Reload . completed ..
     Empty file, Adding '127.1.7.7' to avoid download failure.
    

    SG-3100 24.11-RELEASE (arm) | Avahi (2.2_6) | ntopng (5.6.0_1) | openvpn-client-export (1.9.5) | pfBlockerNG-devel (3.2.1_20) | System_Patches (2.2.20_1)

    F 1 Reply Last reply Nov 9, 2022, 8:20 AM Reply Quote 0
    • F
      fireodo @lohphat
      last edited by fireodo Nov 10, 2022, 8:37 AM Nov 9, 2022, 8:20 AM

      @lohphat

      Same here too ... I guess it has something to do with the api.bgpview.io ...
      Maybe BBcan177 can clarify ...

      Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
      SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
      pfsense 2.7.2 CE
      Packages: Apcupsd Cron Iftop Iperf LCDproc Nmap pfBlockerNG RRD_Summary Shellcmd Snort Speedtest System_Patches.

      L 1 Reply Last reply Nov 9, 2022, 6:47 PM Reply Quote 1
      • L
        lohphat @fireodo
        last edited by lohphat Nov 9, 2022, 7:41 PM Nov 9, 2022, 6:47 PM

        @fireodo It's back.

        Apparently a transient error.

        Perhaps a better d/l failure error for the logs is called for, or a backup ASN lookup API on another site for failover?

        Today's pull:

        Alias table IP Counts
        -----------------------------
           24420 total
           16967 /var/db/aliastables/pfB_PRI1_v4.txt
            3918 /var/db/aliastables/pfB_ASN_List_v6.txt
            3455 /var/db/aliastables/pfB_ASN_List_v4.txt
              51 /var/db/aliastables/pfB_PRI1_6_v6.txt
              26 /var/db/aliastables/pfB_MyBlockedDomains_v4.txt
               3 /var/db/aliastables/pfB_SCANNERS_v4.txt
        

        Yesterday's incorrect pull:

        Alias table IP Counts
        -----------------------------
           17055 total
           16951 /var/db/aliastables/pfB_PRI1_v4.txt
              51 /var/db/aliastables/pfB_PRI1_6_v6.txt
              26 /var/db/aliastables/pfB_MyBlockedDomains_v4.txt
              17 /var/db/aliastables/pfB_ASN_List_v4.txt
               7 /var/db/aliastables/pfB_ASN_List_v6.txt
               3 /var/db/aliastables/pfB_SCANNERS_v4.txt
        

        The reason the ASN_List_v4 and v6 have some addresses is that they're the manually custom entered addresses at the end of the config entry.

        SG-3100 24.11-RELEASE (arm) | Avahi (2.2_6) | ntopng (5.6.0_1) | openvpn-client-export (1.9.5) | pfBlockerNG-devel (3.2.1_20) | System_Patches (2.2.20_1)

        1 Reply Last reply Reply Quote 1
        • F
          fireodo
          last edited by fireodo Nov 9, 2022, 7:07 PM Nov 9, 2022, 7:03 PM

          @lohphat said in ASN lookup failing with empty files:

          It's back.

          Not here :-(

          I see you have pfblockerNG-devel 3.1.0_7 i have 3.1.0_6 ... i dont know if there is any difference concerning the arised issue ...

          Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
          SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
          pfsense 2.7.2 CE
          Packages: Apcupsd Cron Iftop Iperf LCDproc Nmap pfBlockerNG RRD_Summary Shellcmd Snort Speedtest System_Patches.

          L 1 Reply Last reply Nov 9, 2022, 7:11 PM Reply Quote 0
          • L
            lohphat @fireodo
            last edited by Nov 9, 2022, 7:11 PM

            @fireodo said in ASN lookup failing with empty files:

            Not here :-(

            Maybe the API server is unstable or overloaded and silently rejecting connections.

            SG-3100 24.11-RELEASE (arm) | Avahi (2.2_6) | ntopng (5.6.0_1) | openvpn-client-export (1.9.5) | pfBlockerNG-devel (3.2.1_20) | System_Patches (2.2.20_1)

            F 1 Reply Last reply Nov 9, 2022, 7:13 PM Reply Quote 0
            • F
              fireodo @lohphat
              last edited by Nov 9, 2022, 7:13 PM

              @lohphat said in ASN lookup failing with empty files:

              @fireodo said in ASN lookup failing with empty files:

              Not here :-(

              Maybe the API server is unstable or overloaded and silently rejecting connections.

              Would you mind to test this ASN: AS47890 ?

              Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
              SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
              pfsense 2.7.2 CE
              Packages: Apcupsd Cron Iftop Iperf LCDproc Nmap pfBlockerNG RRD_Summary Shellcmd Snort Speedtest System_Patches.

              L 1 Reply Last reply Nov 9, 2022, 7:28 PM Reply Quote 0
              • L
                lohphat @fireodo
                last edited by Nov 9, 2022, 7:28 PM

                @fireodo said in ASN lookup failing with empty files:

                Would you mind to test this ASN: AS47890

                IPv4:

                2.57.120.0/23
                2.57.122.0/24
                45.8.44.0/24
                45.13.37.0/24
                45.13.212.0/24
                45.129.15.0/24
                80.94.92.0/23
                92.118.39.0/24
                185.232.64.0/24
                185.232.66.0/24
                193.29.14.0/24
                193.32.163.0/24
                193.46.254.0/23
                193.47.69.0/24
                

                IPv6:

                2a0c:9f00::/48
                2a0e:1d80:7::/48
                2a10:9100:6::/48
                2a10:9100:a::/48
                

                SG-3100 24.11-RELEASE (arm) | Avahi (2.2_6) | ntopng (5.6.0_1) | openvpn-client-export (1.9.5) | pfBlockerNG-devel (3.2.1_20) | System_Patches (2.2.20_1)

                F 1 Reply Last reply Nov 9, 2022, 7:30 PM Reply Quote 0
                • F
                  fireodo @lohphat
                  last edited by Nov 9, 2022, 7:30 PM

                  @lohphat said in ASN lookup failing with empty files:

                  @fireodo said in ASN lookup failing with empty files:

                  Would you mind to test this ASN: AS47890

                  IPv4:

                  2.57.120.0/23
                  2.57.122.0/24
                  45.8.44.0/24
                  45.13.37.0/24
                  45.13.212.0/24
                  45.129.15.0/24
                  80.94.92.0/23
                  92.118.39.0/24
                  185.232.64.0/24
                  185.232.66.0/24
                  193.29.14.0/24
                  193.32.163.0/24
                  193.46.254.0/23
                  193.47.69.0/24
                  

                  IPv6:

                  2a0c:9f00::/48
                  2a0e:1d80:7::/48
                  2a10:9100:6::/48
                  2a10:9100:a::/48
                  

                  Thanks - thats correct ... I get only empty file here ...

                  Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
                  SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
                  pfsense 2.7.2 CE
                  Packages: Apcupsd Cron Iftop Iperf LCDproc Nmap pfBlockerNG RRD_Summary Shellcmd Snort Speedtest System_Patches.

                  L 1 Reply Last reply Nov 9, 2022, 7:33 PM Reply Quote 0
                  • L
                    lohphat @fireodo
                    last edited by Nov 9, 2022, 7:33 PM

                    @fireodo said in ASN lookup failing with empty files:

                    Thanks - thats correct ... I get only empty file here ...

                    Yeah...methinks it's that the API server is overloaded perhaps.

                    SG-3100 24.11-RELEASE (arm) | Avahi (2.2_6) | ntopng (5.6.0_1) | openvpn-client-export (1.9.5) | pfBlockerNG-devel (3.2.1_20) | System_Patches (2.2.20_1)

                    F 1 Reply Last reply Nov 9, 2022, 7:37 PM Reply Quote 0
                    • F
                      fireodo @lohphat
                      last edited by fireodo Nov 10, 2022, 8:38 AM Nov 9, 2022, 7:37 PM

                      @lohphat said in ASN lookup failing with empty files:

                      Yeah...methinks it's that the API server is overloaded perhaps.

                      Could be ... this persists now for allmost 24 hours ... maybe I should be pacient :-D (not exactly my strength)

                      EDIT: Its back here too - this morning everything was as it should be!
                      @lohphat maybe you can edit the topic as resolved.

                      Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
                      SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
                      pfsense 2.7.2 CE
                      Packages: Apcupsd Cron Iftop Iperf LCDproc Nmap pfBlockerNG RRD_Summary Shellcmd Snort Speedtest System_Patches.

                      L 1 Reply Last reply Nov 10, 2022, 8:06 PM Reply Quote 0
                      • L
                        lohphat @fireodo
                        last edited by lohphat Nov 10, 2022, 11:04 PM Nov 10, 2022, 8:06 PM

                        @fireodo said in ASN lookup failing with empty files:

                        @lohphat maybe you can edit the topic as resolved.

                        I think only admins can change topic text, unless I just can't find where to edit it.

                        I still think that the failure mode could be better handled and alerted -- the logs indicated empty files, but was it due to d/l failure or the server returned an empty file? Something should throw an alert if possible.

                        SG-3100 24.11-RELEASE (arm) | Avahi (2.2_6) | ntopng (5.6.0_1) | openvpn-client-export (1.9.5) | pfBlockerNG-devel (3.2.1_20) | System_Patches (2.2.20_1)

                        F 1 Reply Last reply Nov 11, 2022, 8:20 AM Reply Quote 1
                        • F
                          fireodo @lohphat
                          last edited by Nov 11, 2022, 8:20 AM

                          @lohphat said in ASN lookup failing with empty files [solved]:

                          I still think that the failure mode could be better handled and alerted -- the logs indicated empty files, but was it due to d/l failure or the server returned an empty file? Something should throw an alert if possible.

                          Ofcourse that could be a good Idea!

                          Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
                          SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
                          pfsense 2.7.2 CE
                          Packages: Apcupsd Cron Iftop Iperf LCDproc Nmap pfBlockerNG RRD_Summary Shellcmd Snort Speedtest System_Patches.

                          1 Reply Last reply Reply Quote 0
                          12 out of 12
                          • First post
                            12/12
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                            This community forum collects and processes your personal information.
                            consent.not_received