Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    pfBlockerNG / pfBlockerNG-devel v3.2.0_3 - pfSense 2.6 Only

    pfBlockerNG
    11
    21
    1297
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      jdeloach @BBcan177 last edited by

      @bbcan177
      I've upgraded pfBlockerNG-devel v3.1.0_11 to v3.2.0_3 with no issues on my pfSense v 2.6.0 CE. I am monitoring to see if I see any problems. So far I have found none.

      Thanks for all the good work you put into this great package. Will let you know if any issues pop up.

      1 Reply Last reply Reply Quote 2
      • fireodo
        fireodo last edited by

        Hi,

        here too - I cannot see any problems after updating to pfblockerNG from 3.1.0_11 to 3.2.0_3!

        Thank you @BBcan177 for your good work!

        Regards,
        fireodo

        Kettop Mi4300YL, CPU: i5-4300Y @ 1.60GHz, RAM: 8GB, 4Ports
        SanDisk pSSD-S2 16GB (ZFS), WLE200NX (WiFi)
        Pfsense 2.6.0
        PKGs: Apcupsd, Cron, Iftop, Iperf, LCDproc, Nmap, pfBlockerNG-devel, RRD_Summary, Shellcmd, Snort, Speedtest, System_Patches.

        N 1 Reply Last reply Reply Quote 1
        • N
          nimrod @fireodo last edited by

          Upgraded successfully on 2.6 CE. No issues.

          1 Reply Last reply Reply Quote 1
          • S
            StefanC last edited by

            Smooth upgrade on 2.6 CE .. all is well.

            Thanks!

            1 Reply Last reply Reply Quote 1
            • P
              Patch @BBcan177 last edited by

              @bbcan177 said in pfBlockerNG / pfBlockerNG-devel v3.2.0_3 - pfSense 2.6 Only:

              Changelog pfBlockerNG:

              This replaces the old pfBlockerNG v2.1.4_28 with pfBlockerNG v3.2.0_3

              Refer to pfBlockerNG-devel changelogs for all other details

              As pfBlockerNG has been updated to be identical to pfBlockerNG-devel does that mean most users should be using pfBlockerNG going forward?

              If so what is the recommended method of converting from pfBlockerNG to pfBlockerNG-devel? Does uninstalling pfBlockerNG-devel then installing pfBlockerNG maintain all the

              • settings
              • history
              • prior downloaded block lists (One of the lists I use in no longer available VPN IP list)
              1 Reply Last reply Reply Quote 0
              • F
                fbrunken last edited by fbrunken

                I just upgraded my pfsense to 23.01 and pfBlockerNG to 3.2.0_3 and I am now having consistent errors on the Talos_BL download.

                I checked the source, it opens ok. I forced a reload and also had no problems. Only the CRON is failing.

                Here is a snippet of the log:

                [ Talos_BL_v4 ]
                			Previous download failed.	Re-attempt download
                 UPDATE PROCESS START [ v3.2.0_3 ]
                

                Is anybody else having this problem?

                fireodo 1 Reply Last reply Reply Quote 0
                • fireodo
                  fireodo @fbrunken last edited by

                  @fbrunken said in pfBlockerNG / pfBlockerNG-devel v3.2.0_3 - pfSense 2.6 Only:

                  Is anybody else having this problem?

                  I am not using this list but i see it resolvs to:

                  https://snort-org-site.s3.amazonaws.com/production/document_files/files/000/021/752/original/ip_filter.blf?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAU7AK5ITMJQBJPARJ%2F20230226%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20230226T182807Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=612ccaba26d773a1ba87c2f891cbec74081e5c6881c72e71a642bda98b35230a

                  perhaps you should use this direct link ...

                  just my 2 cents

                  Kettop Mi4300YL, CPU: i5-4300Y @ 1.60GHz, RAM: 8GB, 4Ports
                  SanDisk pSSD-S2 16GB (ZFS), WLE200NX (WiFi)
                  Pfsense 2.6.0
                  PKGs: Apcupsd, Cron, Iftop, Iperf, LCDproc, Nmap, pfBlockerNG-devel, RRD_Summary, Shellcmd, Snort, Speedtest, System_Patches.

                  F 1 Reply Last reply Reply Quote 1
                  • F
                    fbrunken @fireodo last edited by

                    Dear @fireodo

                    Thanks for the suggestion.

                    Anyway, I finished the upgrade and was having consistent issues with the list. So, I tried the link myself and forced a reload. Both worked. Then, once the CRON job kicked in, I still had the problem...

                    But now, for whatever reason, it is working. No changes... In short, whatever the problem was, everything is fine now.

                    Thanks anyway

                    fireodo 1 Reply Last reply Reply Quote 1
                    • the other
                      the other last edited by

                      Updated Tuesday...everything working without flaws.
                      Thank you very much and sincerely for your work with the package. It even saves our planet: I got rid of my raspi with pihole years ago, thanx to your work...
                      ;)

                      the other

                      pure amateur home user, no business or professional background
                      please excuse poor english skills and typpoz :)

                      1 Reply Last reply Reply Quote 1
                      • fireodo
                        fireodo @fbrunken last edited by

                        @fbrunken said in pfBlockerNG / pfBlockerNG-devel v3.2.0_3 - pfSense 2.6 Only:

                        Thanks anyway

                        You're welcome!

                        Kettop Mi4300YL, CPU: i5-4300Y @ 1.60GHz, RAM: 8GB, 4Ports
                        SanDisk pSSD-S2 16GB (ZFS), WLE200NX (WiFi)
                        Pfsense 2.6.0
                        PKGs: Apcupsd, Cron, Iftop, Iperf, LCDproc, Nmap, pfBlockerNG-devel, RRD_Summary, Shellcmd, Snort, Speedtest, System_Patches.

                        1 Reply Last reply Reply Quote 1
                        • N
                          ncm-com last edited by

                          We have a function to filter traffic by specific country does this still exist?

                          S 1 Reply Last reply Reply Quote 0
                          • S
                            SteveITS @ncm-com last edited by

                            @ncm-com yes.
                            68dee084-41e5-4474-a3c1-fc7777e511a5-image.png

                            Steve

                            Only install packages for your version, or risk breaking it. If yours is older, select it in System/Update/Update Settings.
                            When upgrading, let it finish; do not reboot early. Allow 10-15 minutes, or more depending on packages and device speed.

                            N 1 Reply Last reply Reply Quote 0
                            • N
                              ncm-com @SteveITS last edited by

                              @steveits I have version 3.2.0_3 and only following option available
                              Screenshot 2023-03-08 at 10.20.24.png

                              Gertjan S 2 Replies Last reply Reply Quote 0
                              • Gertjan
                                Gertjan @ncm-com last edited by Gertjan

                                @ncm-com

                                These are the world regions available.
                                Which is the one your are missing ?

                                Btw : do you host services like a web or mail server behind your pfSense ?

                                edit : if not, then this is the best setting :

                                2e39943b-db15-4df4-a039-cd083793607b-image.png

                                as they will all hit the only and perfect WAN firewall rule : "block all".
                                There is no need to put a rule above that final block all rule that says : you are blocked.

                                No "help me" PM's please. Use the forum.

                                N 1 Reply Last reply Reply Quote 0
                                • N
                                  ncm-com @Gertjan last edited by ncm-com

                                  @gertjan Yes I have a web service, but before the update, I can filter what countries I can allow to enter my web server rather than a continent, I'm looking for that function Screenshot 2023-03-08 at 12.21.01.png

                                  N 1 Reply Last reply Reply Quote 0
                                  • S
                                    SteveITS @ncm-com last edited by

                                    @ncm-com on the IPv4 tab you can create an alias using whatever countries you wish.

                                    Steve

                                    Only install packages for your version, or risk breaking it. If yours is older, select it in System/Update/Update Settings.
                                    When upgrading, let it finish; do not reboot early. Allow 10-15 minutes, or more depending on packages and device speed.

                                    N 1 Reply Last reply Reply Quote 0
                                    • N
                                      ncm-com @SteveITS last edited by

                                      @steveits so if I deny all locations on GeoIP and allow one country on IPv4 it will overrule? let's say I need to add only a few countries to the allowed list.

                                      the other S 2 Replies Last reply Reply Quote 0
                                      • the other
                                        the other @ncm-com last edited by

                                        @ncm-com
                                        Hey there,
                                        I would just pick those allowed countries, place that before default deny all, done.

                                        the other

                                        pure amateur home user, no business or professional background
                                        please excuse poor english skills and typpoz :)

                                        1 Reply Last reply Reply Quote 0
                                        • N
                                          ncm-com @ncm-com last edited by

                                          This post is deleted!
                                          1 Reply Last reply Reply Quote 0
                                          • S
                                            SteveITS @ncm-com last edited by

                                            @ncm-com said in pfBlockerNG / pfBlockerNG-devel v3.2.0_3 - pfSense 2.6 Only:

                                            @steveits so if I deny all locations on GeoIP and allow one country on IPv4 it will overrule? let's say I need to add only a few countries to the allowed list.

                                            On the Geo page use Alias Native and it will create an alias. You can then create your own rules in the order you wish.

                                            Steve

                                            Only install packages for your version, or risk breaking it. If yours is older, select it in System/Update/Update Settings.
                                            When upgrading, let it finish; do not reboot early. Allow 10-15 minutes, or more depending on packages and device speed.

                                            1 Reply Last reply Reply Quote 1
                                            • First post
                                              Last post