Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    pfBlockerNG and configuration history

    Scheduled Pinned Locked Moved pfBlockerNG
    4 Posts 2 Posters 1.8k Views 4 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M Offline
      mcury Rebel Alliance
      last edited by mcury

      I'll be testing the commit 6e558c8679c7cb9048a8c29101cb3158330d6dde.
      Feedback will be posted here.

      dead on arrival, nowhere to be found.

      tinfoilmattT 1 Reply Last reply Reply Quote 0
      • tinfoilmattT Offline
        tinfoilmatt @mcury
        last edited by

        @mcury said in pfBlockerNG and configuration history:

        I'll be testing the commit 6e558c8679c7cb9048a8c29101cb3158330d6dde.

        Linked.

        M 1 Reply Last reply Reply Quote 0
        • M Offline
          mcury Rebel Alliance @tinfoilmatt
          last edited by mcury

          pfSense version: 25.07.1
          pfBlocker version: pfBlockerNG-devel 3.2.7

          Name: pfblockerNG config rewrites Bug #14409
          Path Strip Count: 0
          Everything else set to default.

          Patch modified to match the correct lines in the 25.07.1 pfBlockerNG-devel 3.2.7

          https://redmine.pfsense.org/issues/14409
          
          --- /usr/local/pkg/pfblockerng/pfblockerng.inc
          +++ /usr/local/pkg/pfblockerng/pfblockerng.inc
          @@ -1969,6 +1969,7 @@
           			}
           		}
           
          +		$vip_count = 0;		
           		$pfbfound = FALSE;
           		// Collect existing pfSense VIPs
           		foreach (config_get_path('virtualip/vip', []) as $ex_vip) {
          @@ -1976,6 +1977,7 @@
           				// Collect DNSBL VIP
           				$dnsbl_ex_vip[] = $ex_vip;
           				$pfbfound = TRUE;
          +				$vip_count++;
           			} else {
           				// Collect all 'other' VIPs
           				$pfb_ex_vip[] = $ex_vip;
          @@ -2017,7 +2019,6 @@
           		}
           
           		// Validate DNSBL VIP address(es)
          -		$pfb['dnsbl_v6'] == 'on' ? $vip_count = 2 : $vip_count = 1;
           		$result = array();
           		foreach (array("inet {$pfb['dnsbl_vip']}", "inet6 ::{$pfb['dnsbl_vip']}") as $g_vip) {
           			$g_vip = escapeshellarg($g_vip);
          

          dc8aeb80-4ca7-4daf-9a9b-5709ca6f0ce5-image.png

          dead on arrival, nowhere to be found.

          M 1 Reply Last reply Reply Quote 0
          • M Offline
            mcury Rebel Alliance @mcury
            last edited by mcury

            The commit didn't work for me.
            pfBlockerNG fullfilling the pfsense config history, reverting the patch now.

            dead on arrival, nowhere to be found.

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.