Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Error on pfblockerng.inc:5310 pfBlockerNG-devel 3.2.0_5

    pfBlockerNG
    8
    24
    1.9k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      andrebrait @markdavis
      last edited by

      @markdavis yeah, I've been working with BBcan177 in a larger patch set for pfBlockerNG, but I'm gonna suggest this gets merged and released first.

      I've been a bit short on time to complete the full patch set.

      M 1 Reply Last reply Reply Quote 1
      • M
        markdavis @andrebrait
        last edited by

        @andrebrait said in Error on pfblockerng.inc:5310 pfBlockerNG-devel 3.2.0_5:

        @markdavis yeah, I've been working with BBcan177 in a larger patch set for pfBlockerNG, but I'm gonna suggest this gets merged and released first.

        I've been a bit short on time to complete the full patch set.

        Do you think it is safe for us to just ignore the issue with the "reports" tab and move forward with implementation? Kinda makes me nervous, though :)

        A S 2 Replies Last reply Reply Quote 0
        • A
          andrebrait @markdavis
          last edited by

          @markdavis it should be. AFAICT the error is only for that tab. Well, there was another thing too, but nonetheless, it's for presentation on the screen. It doesn't affect the actual blocking or anything, IIRC.

          M 1 Reply Last reply Reply Quote 1
          • S
            SteveITS Rebel Alliance @markdavis
            last edited by

            @markdavis re HA be aware pfB sync doesn’t work unless you force reload on the primary.
            https://forum.netgate.com/topic/179060/pfblockerng-sync-not-working/ (there’s a typo fix but it still doesn’t work)

            Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
            When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
            Upvote 👍 helpful posts!

            M 1 Reply Last reply Reply Quote 1
            • M
              markdavis @andrebrait
              last edited by

              @andrebrait said in Error on pfblockerng.inc:5310 pfBlockerNG-devel 3.2.0_5:

              @markdavis it should be. AFAICT the error is only for that tab. Well, there was another thing too, but nonetheless, it's for presentation on the screen. It doesn't affect the actual blocking or anything, IIRC.

              Thanks. It is odd that nobody else reported what we are seeing with the reports tab. But it seems to be the same error as the OP, only in a different situation.

              M 1 Reply Last reply Reply Quote 0
              • M
                markdavis @SteveITS
                last edited by

                @SteveITS said in Error on pfblockerng.inc:5310 pfBlockerNG-devel 3.2.0_5:

                @markdavis re HA be aware pfB sync doesn’t work unless you force reload on the primary.
                https://forum.netgate.com/topic/179060/pfblockerng-sync-not-working/ (there’s a typo fix but it still doesn’t work)

                Wow, thanks.... yet more stuff to consider! I don't think I would have ever known that without you pointing that out.

                A 1 Reply Last reply Reply Quote 0
                • A
                  andrebrait @markdavis
                  last edited by

                  @markdavis definitely not something for production, but if you want, you can test the pfBlockerNG-devel from this repo/branch:

                  https://github.com/andrebrait/FreeBSD-ports/tree/pfblockerng-adblock

                  In Python mode, it's also capable of parsing more types of AdBlock-style lists, including exclusions and whatnot. Should be stable, but probably needs more testing.

                  1 Reply Last reply Reply Quote 0
                  • M
                    markdavis @markdavis
                    last edited by

                    @markdavis said in Error on pfblockerng.inc:5310 pfBlockerNG-devel 3.2.0_5:

                    @andrebrait said in Error on pfblockerng.inc:5310 pfBlockerNG-devel 3.2.0_5:

                    @markdavis it should be. AFAICT the error is only for that tab. Well, there was another thing too, but nonetheless, it's for presentation on the screen. It doesn't affect the actual blocking or anything, IIRC.

                    Thanks. It is odd that nobody else reported what we are seeing with the reports tab. But it seems to be the same error as the OP, only in a different situation.

                    We have a test pfsense install and the errors don't occur on that one. So we suspect it is because we have multiple WANs and/or HA, and/or complex interface configs, dhcp running, static mappings, and/or whatnot on our production servers (dual Netgate 1537's with 10Gb LAGG, VLANs, etc).

                    Anyway, we installed the System_Patches package and created a patch based on other postings:
                    https://redmine.pfsense.org/issues/14230 and applied it and it immediately solved the problems we had with the reports tab and also getting an error every hour (when pfblocker updates).

                    Thanks to those who helped. Looks like @andrebrait is still working on getting it into official.

                    A 1 Reply Last reply Reply Quote 1
                    • A
                      andrebrait @markdavis
                      last edited by

                      @markdavis yes, I am. We're currently reviewing the changes that will be merged and addressing some small concerns regarding logging.

                      M 1 Reply Last reply Reply Quote 0
                      • M
                        michmoor LAYER 8 Rebel Alliance @andrebrait
                        last edited by

                        @andrebrait
                        Ive taken a look at your pull requests so this is very interesting to see the development going on in the package.
                        Regarding logging, not sure whats being addressed but is there a capability to have the logging rollover each day? Right now everything gets appended to a single logfile.

                        Firewall: NetGate,Palo Alto-VM,Juniper SRX
                        Routing: Juniper, Arista, Cisco
                        Switching: Juniper, Arista, Cisco
                        Wireless: Unifi, Aruba IAP
                        JNCIP,CCNP Enterprise

                        A 1 Reply Last reply Reply Quote 0
                        • A
                          andrebrait @michmoor
                          last edited by

                          @michmoor certainly can be done. I can put that on the queue.

                          I suppose it would be interesting if it could also keep a given X amount of files and automatically remove the oldest ones? I suppose this could give you time to export them somewhere if you need it for something and still have the convenience of having a configurable amount of them on-disk.

                          Kinda getting ahead of myself here, possibly. That's a common use-case in the server world. No idea about the firewall one 😉

                          I'm not sure how feasible it is to do that in Unbound mode. In Unbound with Python, it should at least be easy enough to do that for logs generated by the Python module.

                          1 Reply Last reply Reply Quote 0
                          • M
                            markdavis
                            last edited by

                            FYI: We just updated from 23.09.1 to 24.03 which contains a slightly newer version of PFBlockerNG, 3.2.0_10. The problem still exists and we still have to apply the array patch on our systems.

                            A 1 Reply Last reply Reply Quote 0
                            • A
                              andrebrait @markdavis
                              last edited by

                              @markdavis said in Error on pfblockerng.inc:5310 pfBlockerNG-devel 3.2.0_5:

                              FYI: We just updated from 23.09.1 to 24.03 which contains a slightly newer version of PFBlockerNG, 3.2.0_10. The problem still exists and we still have to apply the array patch on our systems.

                              The fix has not been merged yet, unfortunately.

                              I had to take a time out of developing it. I'll be coming back to it this month, finally.

                              1 Reply Last reply Reply Quote 1
                              • First post
                                Last post