IP-Blocklist

tommyboy180

Hey Tom,

I see the package has come a long way since we first spoke. I might have lost a bit track of the project and have some questions ;)

Did you now completely remove the email function or are you running it trough pfSense its own email routine?
Is there an auto update function so it automatically downloads new lists every night?
And probably one request i look for the most, whitelist a single ip or a range of ips instead of using lists. Some of the ips i need to access are blacklisted as part of a complete range which actually makes no sense but they are probably better save then sorry. So a whitelist function as with snort would be very nice!

-m4rcu5

Hello.

I completely removed the email function. It is no longer required. Email was used as a tool to be notified when the package stopped working. This is not the case with the newer versions since the package is very stable now.
Auto updating takes place on it's own. Every time your filter is modified, reloaded, etc. the package will re-download the lists and re-apply them. Filter reloads happen several times a day without any user intervention.
As far as the whitelist a single IP or range: You will have to create a custom list. It's really easy and you can host it on your pfsense router! It's the best of both worlds. The whitelist functionality is already there, you just have to maintain your own list and it's real easy to do so.

nesense

it installs and updates lists fine, but if you reboot this happens:

Current Status = NOT running
/tmp/rules.debug:90: cannot load "/usr/local/www/packages/ipblocklist/lists/ipfw.ipfw": No such file or directory

syslog:

php: : The command '/usr/local/pkg/pf/IP-Blocklist.sh start' returned exit code '2', the output was 'not running root: IP-Blocklist was found not running 0 table deleted. 0 table deleted. rm: /tmp/rules.debug.tmp: No such file or directory /usr/local/pkg/pf/IP-Blocklist.sh: cannot create /usr/local/www/packages/ipblocklist/errorOUT.txt: Read-only file system rm: /tmp/rules.debug.tmp: No such file or directory 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 1

I think the issue is having the file system mounted read-only under NanoBSD, it was mounted as RW for a while due to some bugs but now its fixed.

thx for the great packages.

Quinn1981

Peer Guardian allows you to allow HTTP. For some lists, this doesn't make sense. All I'm trying to do is block certain organizations from my network and me from them. As far as HTTP traffic goes, I'm not interested in controlling that.

Is there a way I can have all my p2p lists and my unadulterated HTTP too?

tommyboy180

@Quinn1981:

Peer Guardian allows you to allow HTTP. For some lists, this doesn't make sense. All I'm trying to do is block certain organizations from my network and me from them. As far as HTTP traffic goes, I'm not interested in controlling that.

Is there a way I can have all my p2p lists and my unadulterated HTTP too?

I've thought about that as a feature but I haven't had any requests for it. You're the first person to ask about that.
I will put that in my to-do list for the next version.

Quinn1981

Oh, noice. :) I've been playing with squid and bit and was going to play with rules. I've had some success with squid is bypassing the rules and such, but I'm not sure about the internal workings of all of it all.

Quinn1981

http://forum.pfsense.org/index.php/topic,41115.0.html Made a discussion there. I've given up for now. Also, after playing around with IPB, it still stop working and not be blocking anything. It typically happens from too much add and removing of whitelist files. Eventually, a purge will not work to remove the file(s). It seems quite buggy in this respect. Otherwise, it works as intended.

RonpfS

I installed the IP Blocklist package and it seems that perl is not installed

I tried to install perl:

pkg_add -r perl
Error: Unable to get ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-8.1-release/Latest/perl.tbz: File unavailable (e.g., file not found, no access)

It looks like the 'packages-8.1-release' folder is missing

However, I installed ntop, it require and install perl http://files.pfsense.org/packages/8/All/perl-5.12.3.tbz

Now IP Blocklist works fine ::)

RonpfS

The configuration is not saved when you use Diagnostics: Backup/restore
not a big deal, you just reconfigure when you migrate from on computer to another.

killervette

Cant get it to work

Sep 30 23:23:39 php: /packages/ipblocklist/ipblocklist.php: The command 'ipfw -f flush' returned exit code '69', the output was 'ipfw: setsockopt(IP_FW_FLUSH): Protocol not available'
Sep 30 23:23:39 php: : The command '/usr/local/pkg/pf/IP-Blocklist.sh start' returned exit code '1', the output was 'not running root: IP-Blocklist was found not running 0 table deleted. 0 table deleted. rm: /tmp/rules.debug.tmp: No such file or directory rm: /tmp/rules.debug.tmp: No such file or directory 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131'

tommyboy180

I wonder if you're having the same issue as above where perl isn't installed. Can you find out if you have perl installed please?

killervette

What is the easiest way to do that? What should I typein shell?

tommyboy180

perl -v

killervette

perl says command not found, so its not installed. do I just do apt-get?

killervette

reply, so i installed ntop also which had perl. Ip blocklist still will not block any networks. i am waiting for the error log to update with the messages

tommyboy180

Please run these commands if you're having issues running IPBlocklist

setenv PACKAGESITE "ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-8-stable/Latest/"

pkg_add -r perl

pkg_add -r p5-NET-CIDR

rehash

This should fix your issue

killervette

php: /packages/ipblocklist/ipblocklist.php: The command 'ipfw -f flush' returned exit code '69', the output was 'ipfw: setsockopt(IP_FW_FLUSH): Protocol not available'

does it matter if i use country block too?

tommyboy180

We you able to get it running after you ran those commands?

killervette

It says running, but blocking 0 networks no matter how many lists I add

Also, this is in my log

Oct 1 21:34:35 root: IP-Blocklist was found not running

tommyboy180

Can you run```
pkg_info

RonpfS

My installation was working
but to be on the safe side I did the following


$ pkg_info
GeoIP-1.4.8_1       Find the country that any IP address or hostname originates
bsdinstaller-2.0.2011.0913 BSD Installer mega-package
expat-2.0.1_1       XML 1.0 parser written in C
font-util-1.2.0     Create an index of X font files in a directory
fontconfig-2.8.0,1  An XML-based font configuration API for X Windows
fontconfig-2.8.0_1,1 An XML-based font configuration API for X Windows
freetype2-2.4.3     A free and portable TrueType font rendering engine
freetype2-2.4.4     A free and portable TrueType font rendering engine
gd-2.0.35_7,1       A graphics library for fast creation of images
gdbm-1.8.3_3        The GNU database manager
gettext-0.18.1.1    GNU gettext package
graphviz-2.28.0     Graph Visualization Software from AT&T and Bell Labs
grub-0.97_4         GRand Unified Bootloader
jpeg-8_3            IJG's jpeg compression utilities
libart_lgpl-2.3.21,1 Library for high-performance 2D graphics
libevent-1.4.14b_2  Provides an API to execute callback functions on certain ev
libiconv-1.13.1_1   A character set conversion library
libltdl-2.4         System independent dlopen wrapper
libxml2-2.7.8_1     XML parser library for GNOME
ntop-4.0.1_1        Network monitoring tool with command line and web interface
perl-5.12.3         Practical Extraction and Report Language
pkg-config-0.25_1   A utility to retrieve information about installed libraries
png-1.4.4           Library for manipulating PNG images
png-1.4.5_1         Library for manipulating PNG images
python27-2.7.2_1    An interpreted object-oriented programming language
rrdtool-1.2.26_1    Round Robin Database Tools
urwfonts-1.0_3      Another font package for X
webfonts-0.30_6     TrueType core fonts for the Web

pkg_add ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-8-stable/Latest/perl.tbz

pkg_add ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-8-stable/Latest/p5-Net-CIDR.tbz

pkg_info
GeoIP-1.4.8_1       Find the country that any IP address or hostname originates
bsdinstaller-2.0.2011.0913 BSD Installer mega-package
expat-2.0.1_1       XML 1.0 parser written in C
font-util-1.2.0     Create an index of X font files in a directory
fontconfig-2.8.0,1  An XML-based font configuration API for X Windows
fontconfig-2.8.0_1,1 An XML-based font configuration API for X Windows
freetype2-2.4.3     A free and portable TrueType font rendering engine
freetype2-2.4.4     A free and portable TrueType font rendering engine
gd-2.0.35_7,1       A graphics library for fast creation of images
gdbm-1.8.3_3        The GNU database manager
gettext-0.18.1.1    GNU gettext package
graphviz-2.28.0     Graph Visualization Software from AT&T and Bell Labs
grub-0.97_4         GRand Unified Bootloader
jpeg-8_3            IJG's jpeg compression utilities
libart_lgpl-2.3.21,1 Library for high-performance 2D graphics
libevent-1.4.14b_2  Provides an API to execute callback functions on certain ev
libiconv-1.13.1_1   A character set conversion library
libltdl-2.4         System independent dlopen wrapper
libxml2-2.7.8_1     XML parser library for GNOME
ntop-4.0.1_1        Network monitoring tool with command line and web interface
p5-Net-CIDR-0.14    Perl module to manipulate IPv4/IPv6 netblocks in CIDR notat
perl-5.12.3         Practical Extraction and Report Language
pkg-config-0.25_1   A utility to retrieve information about installed libraries
png-1.4.4           Library for manipulating PNG images
png-1.4.5_1         Library for manipulating PNG images
python27-2.7.2_1    An interpreted object-oriented programming language
rrdtool-1.2.26_1    Round Robin Database Tools
urwfonts-1.0_3      Another font package for X
webfonts-0.30_6     TrueType core fonts for the Web

Now I get 0 blocked …. ???

php: /packages/ipblocklist/ipblocklist.php: The command 'ipfw -f flush' returned exit code '69', the output was 'ipfw: setsockopt(IP_FW_FLUSH): Protocol not available'

so I

pkg_delete p5-Net-CIDR-0.14
pkg remove ipblock
pkg remove ntop

pkg add ntop
pkg add ipblock

redo the list

now I get 3615 blocked

::)