ThreatGate DB - pfnet-controller WARN No rules found

[mcury]

Is ThreatGate DB online? Getting these errors: pfnet-controller WARN No rules found when disabling and enabling the feed with malware selected.

MaxMind (geoIP) rules are already working.

Remote feeds are empty.

[marcosm]

Thanks for testing! The default feeds aren't available yet.

[mcury]

Thanks for the update! So far, I'm really enjoying this release.
I'm looking forward to testing ThreatGate DB as soon as it becomes available.

[keyser]

@mcury Does MaxMind downloads work for you? I have entered my ID and license, but even though I select a country for a managed alias, it's never created. There is nothing in logs as far as I can see apart from this:

WARN failed to flush rules error-msg='exit status 1' output='Ethernet rules cleared... rules cleared... nat cleared... pfctl: No error: 0... '

Which I'm not sure Is related to me trying to create a country list.

[mcury]

@keyser said in ThreatGate DB - pfnet-controller WARN No rules found:

Does MaxMind downloads work for you?

It is working.
Try to disable, then enable the feed, it worked for me.

[mcury]

ThreatDB is downloading the MaxMind lists, and you can use them as aliases in firewall rules. However, the rule is not matching packets. I have opened a Redmine ticket: #17027