Country Block
-
I cannot for the life of me KEEP countryblock running. I've been all over this forum trying to find a resolution that works. I've implemented cron jobs to restart the app, which it does, however it doesnt appear to truly be running as, even though I have block outbound checked, I can still connect to countries that are checked. Ive tried uninstalling every package I have, reinstalling CB, restarting the box PFsense is running on, everything I can possibly think of and yet after 5-15 minutes CB just stops working. I have to manually restart it, it works, then a few minutes later its not working again even though the logs say that it was found not running, then cron restarts it, but its not actually working. Sooo frustrating.
Can anyone help? What do I need to provide?
-
I had a similar problem myself and the outbound does work but what I found is that I had to make sure ALL the interfaces are selected and then go to:
/usr/local/www/packages/countryblock/interfaces.txt
delete any text in there and replace simply with "any" (no quotes).
-
Any ideas why Country Block doesn't start automatically after a system reboot? I'm running the embedded pfsense 2.0beta4 on an alix device. I have to go in and select enable after each reboot to start it.
Thanks.
-
I had a similar problem myself and the outbound does work but what I found is that I had to make sure ALL the interfaces are selected and then go to:
/usr/local/www/packages/countryblock/interfaces.txt
delete any text in there and replace simply with "any" (no quotes).
Thanks for the assistance! I checked that file and indeed 'any' is the only text in that file.
I uninstalled lightsquid thinking that perhaps it is causing the issue, considering I see a cronjob running a lightsquid script every 15 minutes. That did not work. For some reason, every 15 minutes it shuts down even though it appears to be running. Very odd.
-
@yaw:
Any ideas why Country Block doesn't start automatically after a system reboot? I'm running the embedded pfsense 2.0beta4 on an alix device. I have to go in and select enable after each reboot to start it.
Thanks.
Have you had any other issues with CB while using the 2.0 beta of pfsense? If not I may give the beta a shot since I cannot seem to resolve my current issues with CB on 1.23.
-
Yeah the email setting page doesn't work. I get a crazy long SSL error when I try and submit a test email. I figure I'll tackle that once I figure out how to start it automatically upon reboot.
-
Good luck mate.
FWIW it appears that either squid or a misconfiguration of squid is what was causing my issue. I removed squids cron jobs and uninstalled the package again, and now CB seems to stay running. Going to test for a day and see what happens. Hopefully I can figure out how to have both co-exist happily as I like squid.
-
Hi everybody
First of all a great thank to Countryblock developers !
I have not understood what the email tab is used to ?
Therefore I have configured it.
SMTP auth no (All hosts on the lan can access the Postfix server)
SMTP security none
Host my_mail_server
Port 25
Username leave_blank
Password leave_blank
From email address my_own_address
To email address admin_address
Subject TestWhen I click "Save" I have a blank screen and my configuration is not saved when I come back to the email tab.
When I fill in username, password after saving I click "Test" and I get the following error message :
Warning: fsockopen(): php_network_getaddresses: getaddrinfo failed: hostname nor servname provided, or not known in /usr/local/www/packages/countryblock/class.smtp.php on line 122 Warning: fsockopen(): unable to connect to none://zimbra:25 in /usr/local/www/packages/countryblock/class.smtp.php on line 122 Mailer Error: SMTP Error: Could not connect to SMTP host.
I have the same error when I replace the name of my mail server with its IP address.
Any ideas ?
Anticipated thanks.
Best regards.
Bernard
Bernard,
I believe this was addressed on page 20 as I had a similar problem…go back a few pages and you should find the answer. I'll let you know when I get to this point of pfsense.
Right now I succumbed to hitting the "Factory defaults" button but this time I am incrementally setting up pfsense. Only LAN and WAN are configured leaving OPT1,2,3,4,5 offline along with configuring the Aliases, NAT, and Rules. I installed CB and wow...not a single spam since setup last night. I'm leaning towards the conclusion that there was some odd switch flipped or forgotten on the last setup as it is working now, or so it seems. Tonight I will backup my current configuration and attempt a few more settings.
I know this has been mentioned before and I believe the reason it was mentioned not done was due to a certain clearance level was needed but having a log just for CB showing what has been blocked for x hours/days would be awesome if just to confirm that stuff is blocked and that nothing has gone array with the configuration. I know the System logs --> firewall are supposed to list something but I'm not familiar with deciphering what was blocked because of CB and what was for something else.
I have removed IP-Blocklist
I have enabled all interfaces
I have tested that from my PFSense box my mail server could be contactedNo success I have the same error : fsockopen(): php_network_getaddresses …
Any Idea
Best regards.
-
The email feature uses phpmailer which is separate from the countryblock package. If your having problems with email you should check to make sure your settings reflect what the mail provider requires. I do know it's really simple to get gmail on the email feature so please double check your settings.
-
Thanks for the tip. I'll look at that today. Any thoughts on the reboot problem?
-
@yaw:
Thanks for the tip. I'll look at that today. Any thoughts on the reboot problem?
Check that /usr/local/etc/rc.d/countryblock.sh exists. This is the script that starts the package on boot.
-
It exists. Any more ideas?
-
@yaw:
It exists. Any more ideas?
It sounds like something is changing your FW rules. You may have a package installed that is doing that.
I have extensively tested this package on pfsense 1.2.3 and I consider it stable. Try to eliminate packages or traffic shaping to see if that corrects the issue. -
It must be something to do with the 2.0 beta. I think you're right about the firewall rules. Whenever they change it kills country block. Something must be changing it after country block is running upon reboot.
No more time to work on it, I'll try again some other day.
Thanks!
-
I did some testing on 2.0BETA not that long ago. I was able to keep it running. I should be receiving a laptop here soon. When I get that I can conduct much better testing on the package and perhaps help keep it stable.
-
Sounds good. I'll give it another go once it's been tested a bit more on 2.0.
-
Background:
I installed recently(3 weeks back) pfsense v1.2.3 and installed Country Block 0.1.9 Beta. It was working fine and top spammers were blocked. I added Cron package and it was still working fine. I added few more countries into the list after that and worked fine.
Issue Start:
Two days ago, all of a sudden, I see this Messag on the bottom
"Current Status = RunningYou are blocking 0 Networks
"
and on the top:
"Check the country that you would like to block completely. Currently 15 of 246 selected."
What I have done to date:
1. As of now, it has only Country Block pacakage installed and nothing else.
2. I followed advice in the thread, removed the package, rebooted, reinstalled, rebooted and selected the countries again, committed the countries and enabled it. After that I did Save/Update. I still get the same message:
"
Current Status = RunningYou are blocking 0 Networks
"Any help is greatly appreciated.
looked at the countries.txt file in this folder - /usr/local/www/packages/countryblock/lists and it is empty file. -
First are you running version 1.2.3 or 2.0BETA? Are you running Traffic shaping or a proxy?
What you can do to troubleshoot more is run /usr/local/www/packages/countryblock/execute.sh in a shell and see if there are any errors produced.
Since you had the package working correctly at one point and now you can't get it to run, I would speculate that something changed. Perhaps a setting or adding a program. Something changed.
If you want you could send me your config to my email and I can dig into it more.
-
Tom
Thank you for your quick response. I am running v1.2.3 and not running traffic shaper, proxy or any other package. I ran the script and here is the output
/usr/local/www/packages/countryblock/execute.sh
1 table deleted.
87
10
rm: /tmp/rules.debug.tmp: No such file or directory
rm: /tmp/rules.debug.tmp: No such file or directory
0
… to
200Outside of adding more countries, I have not installed any packages or other changes.
Which file do you want me to send it to you and I will send it you.
-
Email me your backup config file. Go to Diagnostics -> Backup/Restore and download your config.
I will look at your system config and determine why the package is not working for you.