IP-Blocklist

tommyboy180

I noticed their were new packages out available a couple of nights ago and re-installed both Country Block and IP-Blocklist, but both still stop running. Do I need to do something different to keep them running (ie, uninstall and then re-install vs just choosing the re-install option)?

To upgrade you need to uninstall and re-install. The re-install option does nothing.

Slab

@tommyboy180:

To upgrade you need to uninstall and re-install. The re-install option does nothing.

Hi Tom …is the fix for the filter reload problem now in the new version? Thanks...

tommyboy180

@Slab:

@tommyboy180:

To upgrade you need to uninstall and re-install. The re-install option does nothing.

Hi Tom …is the fix for the filter reload problem now in the new version? Thanks...

Yes it is.

Atlanta-Mike

Thanks so much. Both Country Block and I-Blocklist are running fine now. Thanks again!!

focalguy

@tommyboy180:

@focalguy:

Thanks Tom,

I understand you are doing this as time permits and you have other things to do. I also understand it is Beta. I was hoping it was just something I was missing and it would be an easy fix.

I'm not really sure if there are any logs I can capture or anything I can do to dig deeper as to why it is not working. If I can be of any help, please let me know. This is a nice package and I appreciate the work you put into it!

You can follow the process by running convert-execute.sh via the command line and watching the stdout. I will update my BETA 2.0 to the latest and check it it works. What other packages do you have installed?

Thanks. I have no other packages installed although I did have the Open-VM Tools installed since this is running in VMWare ESXi 4.1 but since that package is not working right now I removed it. I did remove this package and then install it again to make sure I am on the latest.

This is what I get below: is it having trouble finding perl? Yea, I just checked and /usr/bin/perl doesn't exist.

[2.0-RC1][admin@removedname]/usr/local/www/packages/ipblocklist(5): ./convert-execute.sh
1 table deleted.
1 table deleted.
./convert-execute.sh: /usr/bin/perl: not found
./convert-execute.sh: /usr/bin/perl: not found
./convert-execute.sh: /usr/bin/perl: not found
rm: /usr/local/www/packages/ipblocklist/lists/ipfw.ipfwTEMP: No such file or directory
rm: Wlists/whitelistTEMP: No such file or directory
rm: /tmp/rules.debug.tmp: No such file or directory
rm: /tmp/rules.debug.tmp: No such file or directory
0
1
2
3
4
5
--snip--
.
.
.
142

tommyboy180

@focalguy:

@tommyboy180:

@focalguy:

Thanks Tom,

I understand you are doing this as time permits and you have other things to do. I also understand it is Beta. I was hoping it was just something I was missing and it would be an easy fix.

I'm not really sure if there are any logs I can capture or anything I can do to dig deeper as to why it is not working. If I can be of any help, please let me know. This is a nice package and I appreciate the work you put into it!

You can follow the process by running convert-execute.sh via the command line and watching the stdout. I will update my BETA 2.0 to the latest and check it it works. What other packages do you have installed?

Thanks. I have no other packages installed although I did have the Open-VM Tools installed since this is running in VMWare ESXi 4.1 but since that package is not working right now I removed it. I did remove this package and then install it again to make sure I am on the latest.

This is what I get below: is it having trouble finding perl? Yea, I just checked and /usr/bin/perl doesn't exist.
[2.0-RC1][admin@removedname]/usr/local/www/packages/ipblocklist(5): ./convert-execute.sh
1 table deleted.
1 table deleted.
./convert-execute.sh: /usr/bin/perl: not found
./convert-execute.sh: /usr/bin/perl: not found
./convert-execute.sh: /usr/bin/perl: not found
rm: /usr/local/www/packages/ipblocklist/lists/ipfw.ipfwTEMP: No such file or directory
rm: Wlists/whitelistTEMP: No such file or directory
rm: /tmp/rules.debug.tmp: No such file or directory
rm: /tmp/rules.debug.tmp: No such file or directory
0
1
2
3
4
5
--snip--
.
.
.
142

Perl get's installed with the compatability package in BETA 2.0. It looks like you're missing perl. Try pkg add -r perl.

focalguy

Yes! That did it. For others, it's actually "pkg_add -r perl".

Thank you for the help! Any idea why my system didn't get it?

tommyboy180

@focalguy:

Yes! That did it. For others, it's actually "pkg_add -r perl".

Thank you for the help! Any idea why my system didn't get it?

Not sure. Line 58 of the install script should have done it.
http://redmine.pfsense.org/projects/pfsense-packages/repository/revisions/master/entry/config/ipblocklist/8/ipblocklist.inc

Good question.

Macom2007

I am on the latest snapshot and i am getting this error while trying to start Country Block :

/tmp/rules.debug:189: cannot load "/usr/local/www/packages/ipblocklist/lists/ipfw.ipfw": No such file or directory

I removed the package and installed it again already.

Any suggestions ?

Macom2007

No one ?

tommyboy180

@Macom2007:

No one ?

Is it breaking your package? By that I mean are you blocking anything despite the error?

Macom2007

Except of CountryBlock all is working fine …

tommyboy180

@Macom2007:

Except of CountryBlock all is working fine …

Can you reword that? I don't understand if countryblock is blocking or not.

Macom2007

Coutryblock is not blocking …

tommyboy180

@Macom2007:

Coutryblock is not blocking …

See if you have perl installed. Run "perl -v" at the command line.

Macom2007

Yes, Perl is installed …

tommyboy180

@Macom2007:

Yes, Perl is installed …

Take a look at lines 32-38 in convert-execute.sh. This is where the ipfw.ipfw file is created.
If those commands don't work then the package cannot use the lists that you are using.

One thing you need to verify is that your lists are in fact working. For example do they get download to lists/ and do the file inside lists/ have data?
Another way you can find out what is broken is to step though convert-execute.sh and see what it's hanging on.

I've done so many hours of testing this package on different platforms that I'm very confident it could be a misconfiguration or a list isn't working at it should be. Another thing is that embedded installs are prone to problems with this package.

Let me know, I would be more than happy to do a full in-depth analysis review of your system to see what the issue is.

root2020

Do you have to manually apply updated filters or does IP-Blocklist automatically refresh the list?

For example if I load a list from a site called www.sitelist.com/block.gz, will IP-Blocklist refresh everyday to get the lasted additions to this list?

tommyboy180

@root2020:

Do you have to manually apply updated filters or does IP-Blocklist automatically refresh the list?

For example if I load a list from a site called www.sitelist.com/block.gz, will IP-Blocklist refresh everyday to get the lasted additions to this list?

The package will re-download the list every time it's applied. Without any modifications this could be every 5 minutes or once a day, this is because Ipblockist is re-applied on filter reload. Now if you need to make sure it's being downloaded every day then install a cron job.

I think it's safe to say that your package is re-applying the list every day or at least every other day.

pathia

Not really sure where I could get the logs to show what's going on. The situation is this.

IP-Blocklist works fine, but after a few hours, the whitelist is forgotten and it ignores it entirely. If I login to the router and hit "Save/Update", it'll start using the whitelist again. Obviously this isn't ideal. Any idea what I could do to figure out why it stops using it? I can't find any messages indicating that the whitelist isn't found, it's stored on the same server the blocklist is coming from…