• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

IP-Blocklist

Scheduled Pinned Locked Moved
pfSense Packages
86
496
467.1k
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • J
    JSmorada
    last edited by Feb 2, 2011, 1:37 PM

    I tried ip-blocklist and could never get it to work. It shows that it's running but is always showing that is is blocking 0 Networks/IPs. Currrntly I'm using the CN and IN pg2.txt lists. I tried uninstalling/rebooting and reinstalling and the behavior didn't change. There isn't anything in the system log either:
    Feb 2 08:28:16 check_reload_status: syncing firewall
    Feb 2 08:27:05 check_reload_status: syncing firewall
    Feb 2 08:26:36 syslogd: kernel boot file is /boot/kernel/kernel
    Feb 2 08:26:36 syslogd: exiting on signal 15
    Feb 2 08:26:25 syslogd: kernel boot file is /boot/kernel/kernel

    1 Reply Last reply Reply Quote 0
    • D
      darxmurf
      last edited by Feb 2, 2011, 4:29 PM Feb 2, 2011, 4:27 PM

      okay,

      I edited the file ipblocklist_list.php

      • added : require_once('config.inc');
      • added : conf_mount_rw(); and conf_mount_ro(); around the block line 69.

      I can now start and add lists in the ip-blocklist settings but it still displays

      Current Status = Running
      You are blocking 0 Networks/IPs

      Any idea ?

      EDIT : When I try to delete a list, it reloads the config page in the iframe in the page  ???

      1 Reply Last reply Reply Quote 0
      • T
        tommyboy180
        last edited by Feb 2, 2011, 4:30 PM

        @darxmurf:

        okay,

        I edited the file ipblocklist_list.php

        • added : require_once('config.inc');
        • added : conf_mount_rw(); and conf_mount_ro(); around the block line 69.

        I can now start and add lists in the ip-blocklist settings but it still displays

        Current Status = Running
        You are blocking 0 Networks/IPs

        Any idea ?

        EDIT : When I try to delete a list, it reloads the config page in the iframe in the page  ???

        Are you using Firefox or Chrome?

        -Tom Schaefer
        SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

        Please support pfBlocker | File Browser | Strikeback

        1 Reply Last reply Reply Quote 0
        • G
          g4m3c4ck
          last edited by Feb 2, 2011, 10:54 PM

          I got Blocking 0 Networks/IP because it was not actually retrieving the lists and putting into the tables at all. Check pfctl -sa | more and see if the table even exists. If not I would check if it is referencing the path properly.

          1 Reply Last reply Reply Quote 0
          • J
            JSmorada
            last edited by Feb 3, 2011, 12:34 AM

            @nipstech:

            I tried ip-blocklist and could never get it to work. It shows that it's running but is always showing that is is blocking 0 Networks/IPs. Currrntly I'm using the CN and IN pg2.txt lists. I tried uninstalling/rebooting and reinstalling and the behavior didn't change. There isn't anything in the system log either:
            Feb 2 08:28:16 check_reload_status: syncing firewall
            Feb 2 08:27:05 check_reload_status: syncing firewall
            Feb 2 08:26:36 syslogd: kernel boot file is /boot/kernel/kernel
            Feb 2 08:26:36 syslogd: exiting on signal 15
            Feb 2 08:26:25 syslogd: kernel boot file is /boot/kernel/kernel

            I updated to the latest 2.0 snapshot and was able to get this from the system log:

            Feb 2 19:27:58 check_reload_status: syncing firewall
            Feb 2 19:27:58 php: /packages/ipblocklist/ipblocklist.php: The command 'rm errorOUT.txt' returned exit code '1', the output was 'rm: errorOUT.txt: No such file or directory'
            Feb 2 19:27:58 php: /packages/ipblocklist/ipblocklist.php: The command 'rm -R /usr/local/www/packages/ipblocklist/lists' returned exit code '1', the output was 'rm: /usr/local/www/packages/ipblocklist/lists: No such file or directory'
            Feb 2 19:27:58 php: /packages/ipblocklist/ipblocklist.php: The command 'ipfw -f flush' returned exit code '69', the output was 'ipfw: setsockopt(IP_FW_FLUSH): Protocol not available'

            1 Reply Last reply Reply Quote 0
            • T
              tommyboy180
              last edited by Feb 3, 2011, 3:55 AM

              @nipstech:

              @nipstech:

              I tried ip-blocklist and could never get it to work. It shows that it's running but is always showing that is is blocking 0 Networks/IPs. Currrntly I'm using the CN and IN pg2.txt lists. I tried uninstalling/rebooting and reinstalling and the behavior didn't change. There isn't anything in the system log either:
              Feb 2 08:28:16 check_reload_status: syncing firewall
              Feb 2 08:27:05 check_reload_status: syncing firewall
              Feb 2 08:26:36 syslogd: kernel boot file is /boot/kernel/kernel
              Feb 2 08:26:36 syslogd: exiting on signal 15
              Feb 2 08:26:25 syslogd: kernel boot file is /boot/kernel/kernel

              I updated to the latest 2.0 snapshot and was able to get this from the system log:

              Feb 2 19:27:58 check_reload_status: syncing firewall
              Feb 2 19:27:58 php: /packages/ipblocklist/ipblocklist.php: The command 'rm errorOUT.txt' returned exit code '1', the output was 'rm: errorOUT.txt: No such file or directory'
              Feb 2 19:27:58 php: /packages/ipblocklist/ipblocklist.php: The command 'rm -R /usr/local/www/packages/ipblocklist/lists' returned exit code '1', the output was 'rm: /usr/local/www/packages/ipblocklist/lists: No such file or directory'
              Feb 2 19:27:58 php: /packages/ipblocklist/ipblocklist.php: The command 'ipfw -f flush' returned exit code '69', the output was 'ipfw: setsockopt(IP_FW_FLUSH): Protocol not available'

              That looks like logs left from re-moving the package. Did you uninstall to try and troubleshoot. I don't use ipfw anymore, I must have left that in the uninstall script. You can safely ignore those errors since ipblocklist uses pcftl for blocking IP ranges.

              Here's what you can do to narrow down the problem. SSH into your box and navigate to /usr/local/www/packages/ipblocklist/  and run convert-execute.sh.
              Make sure your list is working by pasting in the browser. I just checked the level1 example in the package and it seems like the host is now gone. Try http://iblocklist.rlcassidy.net/files/bt_level1.gz as a lvl1 list and see if this works.

              -Tom Schaefer
              SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

              Please support pfBlocker | File Browser | Strikeback

              1 Reply Last reply Reply Quote 0
              • D
                darxmurf
                last edited by Feb 3, 2011, 4:23 AM

                @tommyboy180:

                Are you using Firefox or Chrome?

                Tested with chrome and firefox.
                Also I tried to mount the CF card in RW mode via ssh. I don't have any warning, I can load lists but still have 0 ip blocked

                1 Reply Last reply Reply Quote 0
                • T
                  tommyboy180
                  last edited by Feb 3, 2011, 5:02 AM

                  @darxmurf:

                  @tommyboy180:

                  Are you using Firefox or Chrome?

                  Tested with chrome and firefox.
                  Also I tried to mount the CF card in RW mode via ssh. I don't have any warning, I can load lists but still have 0 ip blocked

                  SSH into your box and navigate to /usr/local/www/packages/ipblocklist/  and run convert-execute.sh
                  Post any errors.

                  -Tom Schaefer
                  SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                  Please support pfBlocker | File Browser | Strikeback

                  1 Reply Last reply Reply Quote 0
                  • D
                    darxmurf
                    last edited by Feb 3, 2011, 5:23 AM

                    @tommyboy180:

                    @darxmurf:

                    @tommyboy180:

                    Are you using Firefox or Chrome?

                    Tested with chrome and firefox.
                    Also I tried to mount the CF card in RW mode via ssh. I don't have any warning, I can load lists but still have 0 ip blocked

                    SSH into your box and navigate to /usr/local/www/packages/ipblocklist/  and run convert-execute.sh
                    Post any errors.

                    Here is :

                    0 table deleted.
                    0 table deleted.
                    ./convert-execute.sh: /usr/bin/perl: not found
                    ./convert-execute.sh: /usr/bin/perl: not found
                    rm: /usr/local/www/packages/ipblocklist/lists/ipfw.ipfwTEMP: No such file or directory
                    rm: Wlists/whitelistTEMP: No such file or directory
                    rm: /tmp/rules.debug.tmp: No such file or directory
                    rm: /tmp/rules.debug.tmp: No such file or directory
                    0
                    1
                    2
                    ..
                    ..
                    219
                    220

                    it displays numbers from 0 to 220

                    1 Reply Last reply Reply Quote 0
                    • D
                      darxmurf
                      last edited by Feb 3, 2011, 1:41 PM Feb 3, 2011, 1:25 PM

                      okay, found the solution

                      I edited the file ipblocklist_list.php

                      • added : require_once('config.inc');
                      • added : conf_mount_rw(); and conf_mount_ro(); around the block line 69

                      edited the file convert-execute.sh

                      • changed "usr/bin/perl" to "/usr/local/bin/perl"

                      edited convert.pl

                      • changed "usr/bin/perl" to "/usr/local/bin/perl"

                      It's now running and blocking the addresses I added in my list

                      EDIT : how can I verify if it's really working ?
                      EDIT 2 : I did not edit the whitelist.php file as I'm not using it…

                      1 Reply Last reply Reply Quote 0
                      • T
                        tommyboy180
                        last edited by Feb 3, 2011, 4:00 PM

                        @darxmurf:

                        okay, found the solution

                        I edited the file ipblocklist_list.php

                        • added : require_once('config.inc');
                        • added : conf_mount_rw(); and conf_mount_ro(); around the block line 69

                        edited the file convert-execute.sh

                        • changed "usr/bin/perl" to "/usr/local/bin/perl"

                        edited convert.pl

                        • changed "usr/bin/perl" to "/usr/local/bin/perl"

                        It's now running and blocking the addresses I added in my list

                        EDIT : how can I verify if it's really working ?
                        EDIT 2 : I did not edit the whitelist.php file as I'm not using it…

                        To verify you can look at the pfctl table. Just look at the php code that counts how many IP networks are being counted.
                        I'm glad you got it working! Since your running embedded I will just link to this post for other embedded users to view. Nice work!

                        -Tom Schaefer
                        SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                        Please support pfBlocker | File Browser | Strikeback

                        1 Reply Last reply Reply Quote 0
                        • D
                          darxmurf
                          last edited by Feb 4, 2011, 7:21 AM Feb 4, 2011, 6:59 AM

                          cool, all looks okay.

                          And btw, thanks for your package  ;D

                          And for ppl with the embedded version, here is the detailed operation:

                          via SSH :
                          Login your system and go in the ip-blocklist folder : /usr/local/www/packages/ipblocklist
                          mount your CF card in RW mode with this command : /etc/rc.conf_mount_rw
                          edit the file ipblocklist_list.php

                          • add this in the 3rd line of the file (the blank one…) : require_once('config.inc');
                          • line 66 add this line: conf_mount_rw();, it's just before this : $myFile = "lists.txt";
                          • line 75 add this line: conf_mount_ro();, it's just after this : fclose($fh);
                            save your file

                          check where is perl on your system with this command : find / -type f -name perl
                          if the result is not : /usr/bin/perl
                          edit files :

                          • convert-execute.php
                          • convert.pl
                            and replace all the "/usr/bin/perl" instances with the path returned by the "find" command

                          then put your system back in RO mode with : /etc/rc.conf_mount_ro

                          If you don't like SSH, you can do everything from the admin page, using the Edit File function located in the Diagnostic menu. From there, you don't need to mount your system in RW mode, the admin page will do it for you

                          */!\ this fix worked on my system but I'm not responsible if your crash yours… so be careful  ;) /!*

                          1 Reply Last reply Reply Quote 0
                          • C
                            Cino
                            last edited by Feb 4, 2011, 9:26 PM

                            Haven't used this package in a while.. Giving it a shot on my 2.0Beta5 build. When i disable IP-Blocklist, I see this error in my log:

                            Feb 4 16:21:54 	php: /packages/ipblocklist/ipblocklist.php: The command 'ipfw -f flush' returned exit code '69', the output was 'ipfw: setsockopt(IP_FW_FLUSH): Protocol not available'
                            

                            BTW great work!! this package is coming out real nice!

                            1 Reply Last reply Reply Quote 0
                            • T
                              tommyboy180
                              last edited by Feb 4, 2011, 9:28 PM

                              @Cino:

                              Haven't used this package in a while.. Giving it a shot on my 2.0Beta5 build. When i disable IP-Blocklist, I see this error in my log:

                              Feb 4 16:21:54 	php: /packages/ipblocklist/ipblocklist.php: The command 'ipfw -f flush' returned exit code '69', the output was 'ipfw: setsockopt(IP_FW_FLUSH): Protocol not available'
                              

                              BTW great work!! this package is coming out real nice!

                              That's some old code that I need to remove. Ignore it until its removed.

                              -Tom Schaefer
                              SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                              Please support pfBlocker | File Browser | Strikeback

                              1 Reply Last reply Reply Quote 0
                              • C
                                Cino
                                last edited by Feb 5, 2011, 3:27 PM

                                thanks tommyboy180!

                                1 Reply Last reply Reply Quote 0
                                • W
                                  wm408
                                  last edited by Feb 6, 2011, 8:23 AM Feb 6, 2011, 4:59 AM

                                  I'm on an embedded pfsense 1.2.3.  I had some errors under the "whitelist" tab on IP-blocklist.

                                  "Warning: fopen(wlists.txt): failed to open stream: Read-only file system in /usr/local/www/packages/ipblocklist/whitelist.php on line 86 Warning: fwrite(): supplied argument is not a valid stream resource in /usr/local/www/packages/ipblocklist/whitelist.php on line 87 Warning: fclose(): supplied argument is not a valid stream resource in /usr/local/www/packages/ipblocklist/whitelist.php on line 92"

                                  -I also have a slave 160GB sata drive mounted to /store.  (Kind of cheating for an embedded, might not apply to most)
                                  -I searched for "wlists.txt" in whitelist.php, while in command mode in vi, typed /wlists.txt
                                  -changed wlists.txt entry to /store/ipblocklist/wlists.txt.
                                  -made sure permissions were the same on the original wlists.txt and the new /store/ipblocklist/wlists.txt  (they were, didn't have to modify)

                                  whitelist tab has no errors now.

                                  Also, thanks a lot guys for the modifications to the files to get it working on embedded!

                                  Hey Tommyboy.. any updates on making Internet Explorer/IE functional with ipblocklist?

                                  I grabbed countryipblocks.net's full pg2 list and removed the US_pg2.txt from the group.  Then did a: cat * > pg2_beast.txt

                                  wget –no-check-certificate -r -U Mozilla -A "*pg2.txt" www.countryipblocks.net/e_country_data/

                                  I had to stop the wget once it started to go recursively outside e_country_data, but I got it all.

                                  Thx so much countryipblocks.net!

                                  1 Reply Last reply Reply Quote 0
                                  • D
                                    darxmurf
                                    last edited by Feb 6, 2011, 3:02 PM

                                    quick question, is it logged somewhere when somebody is blocked ?

                                    1 Reply Last reply Reply Quote 0
                                    • W
                                      wm408
                                      last edited by Feb 6, 2011, 4:38 PM Feb 6, 2011, 4:11 PM

                                      Wow i did this whole write up on squid and forgot I am in the IP-blocklist thread.   ::)  Think I forget because when IP-blocklist is successful, access denied gets shoved into a squid page.

                                      @darxmurf:

                                      quick question, is it logged somewhere when somebody is blocked ?

                                      1 Reply Last reply Reply Quote 0
                                      • T
                                        tommyboy180
                                        last edited by Feb 7, 2011, 1:36 AM

                                        @wm408:

                                        Wow i did this whole write up on squid and forgot I am in the IP-blocklist thread.   ::)  Think I forget because when IP-blocklist is successful, access denied gets shoved into a squid page.

                                        @darxmurf:

                                        quick question, is it logged somewhere when somebody is blocked ?

                                        lol :)

                                        To answer the question, it goes into the firewall logs if you checked logging.

                                        -Tom Schaefer
                                        SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                        Please support pfBlocker | File Browser | Strikeback

                                        1 Reply Last reply Reply Quote 0
                                        • D
                                          darxmurf
                                          last edited by Feb 7, 2011, 1:44 AM

                                          Sorry, I just saw it after I asked my question

                                          1 Reply Last reply Reply Quote 0
                                          273 out of 496
                                          • First post
                                            273/496
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                            This community forum collects and processes your personal information.
                                            consent.not_received