Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IP-Blocklist

    Scheduled Pinned Locked Moved pfSense Packages
    496 Posts 86 Posters 497.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      killervette
      last edited by

      update…i added two different lists.  I think the second one worked.  The first one showed no networks blocked.  When I added the second one it shows 34xx networks blocked.  Is it something to do with the way iblocklist fowards to a different URL???

      http://list.iblocklist.com/?list=bt_proxy&fileformat=p2p&archiveformat=gz
      http://iblocklist.dbnservers.net/files/wujnnzxrgppvpdujdetm/bt_ads.gz

      1 Reply Last reply Reply Quote 0
      • T
        tommyboy180
        last edited by

        I don't see p5-net-cidr in your lists of packages. That package is required by ipblocklist.

        -Tom Schaefer
        SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

        Please support pfBlocker | File Browser | Strikeback

        1 Reply Last reply Reply Quote 0
        • K
          killervette
          last edited by

          @tommyboy180:

          I don't see p5-net-cidr in your lists of packages. That package is required by ipblocklist.

          It's there now. All seems to be working now. Thanks alot

          1 Reply Last reply Reply Quote 0
          • RonpfSR
            RonpfS
            last edited by

            Update on my setup

            
            $ setenv PACKAGESITE "ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-8-stable/Latest/"
            
            $ pkg_add -r p5-Net-CIDR
            Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-8-stable/Latest/p5-Net-CIDR.tbz... Done.
            pkg_add: warning: package 'p5-Net-CIDR-0.14' requires 'perl-5.12.4_2', but 'perl-5.12.3' is installed
            
            $ pkg_add -r perl
            Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-8-stable/Latest/perl.tbz... Done.
            pkg_add: package 'perl-5.12.4_2' or its older version already installed
            
            $ pkg_info
            GeoIP-1.4.8_1       Find the country that any IP address or hostname originates
            bsdinstaller-2.0.2011.0913 BSD Installer mega-package
            expat-2.0.1_1       XML 1.0 parser written in C
            font-util-1.2.0     Create an index of X font files in a directory
            fontconfig-2.8.0,1  An XML-based font configuration API for X Windows
            fontconfig-2.8.0_1,1 An XML-based font configuration API for X Windows
            freetype2-2.4.3     A free and portable TrueType font rendering engine
            freetype2-2.4.4     A free and portable TrueType font rendering engine
            gd-2.0.35_7,1       A graphics library for fast creation of images
            gdbm-1.8.3_3        The GNU database manager
            gettext-0.18.1.1    GNU gettext package
            graphviz-2.28.0     Graph Visualization Software from AT&T and Bell Labs
            grub-0.97_4         GRand Unified Bootloader
            jpeg-8_3            IJG's jpeg compression utilities
            libart_lgpl-2.3.21,1 Library for high-performance 2D graphics
            libevent-1.4.14b_2  Provides an API to execute callback functions on certain ev
            libiconv-1.13.1_1   A character set conversion library
            libltdl-2.4         System independent dlopen wrapper
            libpcap-1.1.1_1     Ubiquitous network traffic capture library
            libxml2-2.7.8_1     XML parser library for GNOME
            ntop-4.0.1_1        Network monitoring tool with command line and web interface
            p5-Net-CIDR-0.14    Perl module to manipulate IPv4/IPv6 netblocks in CIDR notat
            perl-5.12.3         Practical Extraction and Report Language
            pkg-config-0.25_1   A utility to retrieve information about installed libraries
            png-1.4.4           Library for manipulating PNG images
            png-1.4.5_1         Library for manipulating PNG images
            python27-2.7.2_1    An interpreted object-oriented programming language
            rrdtool-1.2.26_1    Round Robin Database Tools
            urwfonts-1.0_3      Another font package for X
            webfonts-0.30_6     TrueType core fonts for the Web
            
            

            So I reverted back again
            removed p5-Net-CIDR-0.14, IP-blocklist, ntop

            installed perl, p5-Net-CIDR

            
            $ pkg_info
            bsdinstaller-2.0.2011.0913 BSD Installer mega-package
            gettext-0.18.1.1    GNU gettext package
            grub-0.97_4         GRand Unified Bootloader
            jpeg-8_3            IJG's jpeg compression utilities
            libiconv-1.13.1_1   A character set conversion library
            
            $ pkg_add -r perl
            Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-8-stable/Latest/perl.tbz... Done.
            Removing stale symlinks from /usr/bin...
                Skipping /usr/bin/perl
                Skipping /usr/bin/perl5
            Done.
            Creating various symlinks in /usr/bin...
                Symlinking /usr/local/bin/perl5.12.4 to /usr/bin/perl
                Symlinking /usr/local/bin/perl5.12.4 to /usr/bin/perl5
            Done.
            cd: can't cd to /usr/include
            Cleaning up /etc/make.conf... Done.
            Spamming /etc/make.conf... Done.
            
            $ pkg_info
            bsdinstaller-2.0.2011.0913 BSD Installer mega-package
            gettext-0.18.1.1    GNU gettext package
            grub-0.97_4         GRand Unified Bootloader
            jpeg-8_3            IJG's jpeg compression utilities
            libiconv-1.13.1_1   A character set conversion library
            perl-5.12.4_2       Practical Extraction and Report Language
            
            $ pkg_add -r p5-Net-CIDR
            Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-8-stable/Latest/p5-Net-CIDR.tbz... Done.
            
            $ pkg_info
            bsdinstaller-2.0.2011.0913 BSD Installer mega-package
            gettext-0.18.1.1    GNU gettext package
            grub-0.97_4         GRand Unified Bootloader
            jpeg-8_3            IJG's jpeg compression utilities
            libiconv-1.13.1_1   A character set conversion library
            p5-Net-CIDR-0.14    Perl module to manipulate IPv4/IPv6 netblocks in CIDR notat
            perl-5.12.4_2       Practical Extraction and Report Language
            
            

            install ntop than IP-Blocklist

            everything works fine now

            
            $ pkg_info                             
            GeoIP-1.4.8_1       Find the country that any IP address or hostname originates
            bsdinstaller-2.0.2011.0913 BSD Installer mega-package
            expat-2.0.1_1       XML 1.0 parser written in C
            font-util-1.2.0     Create an index of X font files in a directory
            fontconfig-2.8.0,1  An XML-based font configuration API for X Windows
            fontconfig-2.8.0_1,1 An XML-based font configuration API for X Windows
            freetype2-2.4.3     A free and portable TrueType font rendering engine
            freetype2-2.4.4     A free and portable TrueType font rendering engine
            gd-2.0.35_7,1       A graphics library for fast creation of images
            gdbm-1.8.3_3        The GNU database manager
            gettext-0.18.1.1    GNU gettext package
            graphviz-2.28.0     Graph Visualization Software from AT&T and Bell Labs
            grub-0.97_4         GRand Unified Bootloader
            jpeg-8_3            IJG's jpeg compression utilities
            libart_lgpl-2.3.21,1 Library for high-performance 2D graphics
            libevent-1.4.14b_2  Provides an API to execute callback functions on certain ev
            libiconv-1.13.1_1   A character set conversion library
            libltdl-2.4         System independent dlopen wrapper
            libpcap-1.1.1_1     Ubiquitous network traffic capture library
            libxml2-2.7.8_1     XML parser library for GNOME
            ntop-4.0.1_1        Network monitoring tool with command line and web interface
            p5-Net-CIDR-0.14    Perl module to manipulate IPv4/IPv6 netblocks in CIDR notat
            perl-5.12.3         Practical Extraction and Report Language
            perl-5.12.4_2       Practical Extraction and Report Language
            pkg-config-0.25_1   A utility to retrieve information about installed libraries
            png-1.4.4           Library for manipulating PNG images
            png-1.4.5_1         Library for manipulating PNG images
            python27-2.7.2_1    An interpreted object-oriented programming language
            rrdtool-1.2.26_1    Round Robin Database Tools
            urwfonts-1.0_3      Another font package for X
            webfonts-0.30_6     TrueType core fonts for the Web
            

            2.4.5-RELEASE-p1 (amd64)
            Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
            Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

            1 Reply Last reply Reply Quote 0
            • T
              tommyboy180
              last edited by

              Ntop and IPblocklist have a package conflict. Package users beware.

              -Tom Schaefer
              SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

              Please support pfBlocker | File Browser | Strikeback

              1 Reply Last reply Reply Quote 0
              • RonpfSR
                RonpfS
                last edited by

                I updated from 0.3.3 to 0.3.4

                $ pkg_info
                GeoIP-1.4.8_1       Find the country that any IP address or hostname originates
                bsdinstaller-2.0.2011.0913 BSD Installer mega-package
                expat-2.0.1_1       XML 1.0 parser written in C
                font-util-1.2.0     Create an index of X font files in a directory
                fontconfig-2.8.0,1  An XML-based font configuration API for X Windows
                fontconfig-2.8.0_1,1 An XML-based font configuration API for X Windows
                freetype2-2.4.3     A free and portable TrueType font rendering engine
                freetype2-2.4.4     A free and portable TrueType font rendering engine
                gd-2.0.35_7,1       A graphics library for fast creation of images
                gdbm-1.8.3_3        The GNU database manager
                gettext-0.18.1.1    GNU gettext package
                graphviz-2.28.0     Graph Visualization Software from AT&T and Bell Labs
                grub-0.97_4         GRand Unified Bootloader
                jpeg-8_3            IJG's jpeg compression utilities
                libart_lgpl-2.3.21,1 Library for high-performance 2D graphics
                libevent-1.4.14b_2  Provides an API to execute callback functions on certain ev
                libiconv-1.13.1_1   A character set conversion library
                libltdl-2.4         System independent dlopen wrapper
                libpcap-1.1.1_1     Ubiquitous network traffic capture library
                libxml2-2.7.8_1     XML parser library for GNOME
                ntop-4.0.1_1        Network monitoring tool with command line and web interface
                p5-Net-CIDR-0.14    Perl module to manipulate IPv4/IPv6 netblocks in CIDR notat
                perl-5.12.3         Practical Extraction and Report Language
                perl-5.12.4_2       Practical Extraction and Report Language
                pkg-config-0.25_1   A utility to retrieve information about installed libraries
                png-1.4.4           Library for manipulating PNG images
                png-1.4.5_1         Library for manipulating PNG images
                python27-2.7.2_1    An interpreted object-oriented programming language
                rrdtool-1.2.26_1    Round Robin Database Tools
                urwfonts-1.0_3      Another font package for X
                webfonts-0.30_6     TrueType core fonts for the Web
                

                I get the following on save, but it is working

                Oct 2 20:16:24 	check_reload_status: Syncing firewall
                Oct 2 20:16:24 	php: /packages/ipblocklist/ipblocklist.php: The command 'cp /usr/local/www/packages/ipblocklist/lists.txt /usr/local/www/packages/ipblocklist_bkup/lists.txt' returned exit code '1', the output was 'cp: /usr/local/www/packages/ipblocklist_bkup/lists.txt: No such file or directory'
                

                the ipblocklist_bkup directory is not present

                once created the is no error on save IP-Blocklist
                and it is still Blocking IP

                2.4.5-RELEASE-p1 (amd64)
                Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
                Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

                1 Reply Last reply Reply Quote 0
                • T
                  tommyboy180
                  last edited by

                  IP-Blocklist Version 3.5 released!

                  • blocklists are saved on system to ease updates

                  • Corrected issues with uninstall

                  • Widget is now available for pfsense 2.0

                  -Tom Schaefer
                  SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                  Please support pfBlocker | File Browser | Strikeback

                  1 Reply Last reply Reply Quote 0
                  • RonpfSR
                    RonpfS
                    last edited by

                    Updated to 3.5
                    On the Webgui IP-Blocklist

                    You are blocking 0 Networks/IPs
                    

                    I had to save to see

                    You are blocking 3615 Networks/IPs
                    

                    Block list are restored after reinstall  ::)

                    Saved setting / Enable logging are not restored .

                    2.4.5-RELEASE-p1 (amd64)
                    Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
                    Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

                    1 Reply Last reply Reply Quote 0
                    • S
                      serialdie
                      last edited by

                      @tommyboy180:

                      IP-Blocklist Version 3.5 released!

                      • blocklists are saved on system to ease updates

                      • Corrected issues with uninstall

                      • Widget is now available for pfsense 2.0

                      Thank You for the update! :)
                      Any chance the widget would be available soon?

                      Thanks! :)

                      1 Reply Last reply Reply Quote 0
                      • T
                        tommyboy180
                        last edited by

                        @serialdie:

                        Any chance the widget would be available soon?

                        ???
                        The widget is included in the newest version.

                        -Tom Schaefer
                        SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                        Please support pfBlocker | File Browser | Strikeback

                        1 Reply Last reply Reply Quote 0
                        • RonpfSR
                          RonpfS
                          last edited by

                          The widget is not available in Dashboard.  ???

                          2.4.5-RELEASE-p1 (amd64)
                          Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
                          Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

                          1 Reply Last reply Reply Quote 0
                          • T
                            tommyboy180
                            last edited by

                            When in doubt uninstall and re-install.

                            -Tom Schaefer
                            SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                            Please support pfBlocker | File Browser | Strikeback

                            1 Reply Last reply Reply Quote 0
                            • RonpfSR
                              RonpfS
                              last edited by

                              I uninstalled and re-installed 3.5

                              now I see the CountryBlock IPBlocklist widget  ::)

                              2.4.5-RELEASE-p1 (amd64)
                              Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
                              Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

                              1 Reply Last reply Reply Quote 0
                              • S
                                serialdie
                                last edited by

                                Thanks tommyboy180!

                                1 Reply Last reply Reply Quote 0
                                • F
                                  firbc
                                  last edited by

                                  Hi,

                                  is there any why to allow connection to blocked IP's on port 80? And if there is any way to manualy add my own IP's to whitelist? Let says that I like to unlock only one specific IP which is in blocklist.

                                  1 Reply Last reply Reply Quote 0
                                  • T
                                    tommyboy180
                                    last edited by

                                    That will be in a future release.

                                    -Tom Schaefer
                                    SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                    Please support pfBlocker | File Browser | Strikeback

                                    1 Reply Last reply Reply Quote 0
                                    • F
                                      firbc
                                      last edited by

                                      Hi again,

                                      Will it be possible to enable blocking only for some IP's on local network? Let say that you want to allow or denied different blocklists for different IP's on network. So one IP on local network can access everything and another would be blocked according to blocklist.

                                      1 Reply Last reply Reply Quote 0
                                      • T
                                        tommyboy180
                                        last edited by

                                        @firbc:

                                        Hi again,

                                        Will it be possible to enable blocking only for some IP's on local network? Let say that you want to allow or denied different blocklists for different IP's on network. So one IP on local network can access everything and another would be blocked according to blocklist.

                                        It's possible now. Take a loot at the interface options. If you create another network then you can allow/deny lists to a specific network.

                                        -Tom Schaefer
                                        SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                        Please support pfBlocker | File Browser | Strikeback

                                        1 Reply Last reply Reply Quote 0
                                        • F
                                          firbc
                                          last edited by

                                          So if I understand you correctly, blocklists will work for specific computer on local network?

                                          example:

                                          1 Reply Last reply Reply Quote 0
                                          • T
                                            tommyboy180
                                            last edited by

                                            Yes, if that computer is on a separate interface.

                                            -Tom Schaefer
                                            SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                            Please support pfBlocker | File Browser | Strikeback

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.