Country Block

phl

CountyBlock doesn't run as a service. It sounds like you committed your countries but the "Enable countryblock" check box isn't checked on the main page of the package.

I read the posts after I had trouble. I uninstalled it and deleted the log file, reinstalled, rebooted, I then selected 2 countries, clicked commit countries - It replies that my settings have been saved, "currently 2 of 252 selected". And at the bottom it shows Current status = NOT running. I then select the "Enable Country Block" box at the top and click save at the bottom. It then shows Current status = running, You are blocking 0 networks. In that same screen, my countries are still selected and it still shows "currently 2 of 252 selected". If I'm dong something wrong, I don't see it. phl

tommyboy180

Are you able to access this file? : http://tomschaefer.org/pfsense/repo/countryblock/CIDR.php

phl

@tommyboy180:

Are you able to access this file? : http://tomschaefer.org/pfsense/repo/countryblock/CIDR.php

Yes I can

tommyboy180

@phl:

@tommyboy180:

Are you able to access this file? : http://tomschaefer.org/pfsense/repo/countryblock/CIDR.php

Yes I can

Okay. Try to uninstall and re-install one more time. I think there was something going on with the server's gateway.

phl

@tommyboy180:

@phl:

@tommyboy180:

Are you able to access this file? : http://tomschaefer.org/pfsense/repo/countryblock/CIDR.php

Yes I can

Okay. Try to uninstall and re-install one more time. I think there was something going on with the server's gateway.

OK I also copied that to /tmp and I reinstalled and it ran and its good, thank you so much!

tommyboy180

@phl:

@tommyboy180:

@phl:

@tommyboy180:

Are you able to access this file? : http://tomschaefer.org/pfsense/repo/countryblock/CIDR.php

Yes I can

Okay. Try to uninstall and re-install one more time. I think there was something going on with the server's gateway.

OK I also copied that to /tmp and I reinstalled and it ran and its good, thank you so much!

Sorry that it took so long to get installed. Just so everyone knows this issue will be fixed very soon. This won't be a problem any longer.

tommyboy180

Version 2.2 released.

Fixed uninstall bug (http://forum.pfsense.org/index.php/topic,24769.msg207044.html#msg207044)
Updated hosting for required files - Now stored on github (http://forum.pfsense.org/index.php/topic,25732.msg208214.html#msg208214)

Supermule

I get this after reinstall and reboot…

Aug 28 08:29:01 root: Countryblock was found not running
Aug 28 08:28:30 root: Countryblock was found not running
Aug 28 08:28:30 login: login on ttyv0 as root
Aug 28 08:28:29 check_reload_status: check_reload_status is starting
Aug 28 08:28:29 last message repeated 18 times
Aug 28 08:28:29 php: : The Country Block package is missing required dependencies and must be reinstalled.
Aug 28 08:28:29 last message repeated 29 times

It is running…at least it says so :)

ljbowdish

I had an OOPS this AM. ;D ;D
I was updating my country block, and inadvertently selected all. It worked perfectly. Unfortunately, we couldn't get to google, or email. Took me a few minutes to get it right.

tommyboy180

@ljbowdish:

I had an OOPS this AM. ;D ;D
I was updating my country block, and inadvertently selected all. It worked perfectly. Unfortunately, we couldn't get to google, or email. Took me a few minutes to get it right.

Ha! That's awesome.

elfchen

I can not start it on latest PFSense.

Get:

Current Stauts = NOT running
pfctl: DICSETSTATUSIF
You are blocking 0 Networks

On an other PFSense engine with same release it worked well without problems - but on this firewall I get this error and don't know why.

Already tried: Steps on FAQ and reinstall.

As long as I did not click on "enable" the error is not shown. I can change all settings, but when I am ready and click on Enable it will not work and report these error.

tommyboy180

@elfchen:

I can not start it on latest PFSense.

Get:

Current Stauts = NOT running
pfctl: DICSETSTATUSIF
You are blocking 0 Networks

On an other PFSense engine with same release it worked well without problems - but on this firewall I get this error and don't know why.

Already tried: Steps on FAQ and reinstall.

As long as I did not click on "enable" the error is not shown. I can change all settings, but when I am ready and click on Enable it will not work and report these error.

That's a first for me. I will have to do some investigation. What have you done to try and fix the error?

elfchen

Tried to reinstall. Tried to work with only one networkcard. Firewall itself works perfect:

Version

1.2.3-RELEASE
built on Sun Dec 6 23:21:36 EST 2009

Platform

pfSense

Uptime

State table size

Show states

MBUF Usage

319 /2310

@tommyboy180:

@elfchen:

I can not start it on latest PFSense.

Get:

Current Stauts = NOT running
pfctl: DICSETSTATUSIF
You are blocking 0 Networks

On an other PFSense engine with same release it worked well without problems - but on this firewall I get this error and don't know why.

Already tried: Steps on FAQ and reinstall.

As long as I did not click on "enable" the error is not shown. I can change all settings, but when I am ready and click on Enable it will not work and report these error.

That's a first for me. I will have to do some investigation. What have you done to try and fix the error?

woc38

This week I updated my pfSense 2.0RC3 to pfSense 2.0-Release. Only having a few firewall rules, no other packages.
Today, after some reading, I installed Country Block via the packages-web-interface.

No errors were shown in the install window;
For testing I only checked China, and clicked on Commit Countries;
I checked "Enable Country Block" and clicked on Save/Update;
I clicked on the Apply Changes button that appears, but after the click, it won't disappear;
At the bottom of the page I see:
Current Status = Running
You are blocking 3408 Networks

So far, all seems fine.
But after this I checked the system logs (partial copy):

Sep 21 13:02:06 php: /pkg_mgr_install.php: Beginning package installation for Country Block.
Sep 21 13:02:07 check_reload_status: Syncing firewall
Sep 21 13:02:33 login: login on ttyu0 as root
Sep 21 13:02:33 check_reload_status: Syncing firewall
Sep 21 13:02:34 check_reload_status: Reloading filter
Sep 21 13:02:35 check_reload_status: Syncing firewall
Sep 21 13:02:41 root: Countryblock was found not running
Sep 21 13:02:43 php: : The command '/usr/local/pkg/pf/countryblock.sh start' returned exit code '1', the output was 'not running root: Countryblock was found not running Status: 404 Not Found Content-type: text/html No input file specified. 0 table deleted. 97 22 rm: /tmp/rules.debug.tmp: No such file or directory rm: /tmp/rules.debug.tmp: No such file or directory 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168'
Sep 21 13:04:28 php: /packages/countryblock/countryblock.php: The command 'rm -R /usr/local/www/packages/countryblock/lists' returned exit code '1', the output was 'rm: /usr/local/www/packages/countryblock/lists: No such file or directory'
Sep 21 13:04:29 php: /packages/countryblock/countryblock.php: The command 'rm errorOUT.txt' returned exit code '1', the output was 'rm: errorOUT.txt: No such file or directory'
Sep 21 13:05:48 check_reload_status: Reloading filter
Sep 21 13:05:53 php: /packages/countryblock/countryblock.php: The command 'rm lists/temp' returned exit code '1', the output was 'rm: lists/temp: No such file or directory'
Sep 21 13:05:57 check_reload_status: Reloading filter
Sep 21 13:05:59 root: Countryblock was found not running

The last entry keeps appearing, even after I did the trick with the editing/saving of a random firewall rule

How can I tell the package is running? And what about the errors in the log file?

And, maybe a newbie question, I checked the log option in settings, but what does it log exactly and where?

tommyboy180

The logs can be ignored. There is a lot of output that is a little confusing. You get a lot of errors because there are several different installs out there and the package is built for stability on multiple install types. Those errors are repeated because the firewall filter gets regenerated when a system change occurs, which can be very frequent depending on your setup, and countryblock runs its script to ensure it's running when this happens.

Basically if it says it's running and there are networks being blocked then it's working 100% because it queries that directly from the firewall rules.

mentalhemroids

It still doesn't seem as though Country Block is working - I have all the spam recommended countries enabled, but can't seem to find one that I can block… Any suggestions on a site to test? Running 2.0-RELEASE (i386) built on Tue Sep 13 17:28:43 EDT 2011.
I have tried to get both this and IP Blocklist to work... can't seem to get it going. The interface says they are running though. Thanks!

Sep 21 09:05:39 root: Countryblock was found not running
Sep 21 09:05:34 root: IP-Blocklist was found not running
Sep 21 09:05:22 root: Countryblock was found not running
Sep 21 09:05:16 root: IP-Blocklist was found not running
Sep 21 09:05:11 php: /pkg_edit.php: Reloading Squid for configuration sync
Sep 21 09:05:11 check_reload_status: Reloading filter
Sep 21 09:05:11 check_reload_status: Syncing firewall
Sep 21 09:05:10 check_reload_status: Reloading filter
Sep 21 09:05:10 php: /pkg_edit.php: Reloading Squid for configuration sync
Sep 21 08:55:50 php: /packages/countryblock/countryblock.php: The command 'rm lists/temp' returned exit code '1', the output was 'rm: lists/temp: No such file or directory'
Sep 21 08:49:56 php: : The command '/usr/local/pkg/pf/countryblock.sh start' returned exit code '1', the output was 'not running root: Countryblock was found not running Status: 404 Not Found Content-type: text/html No input file specified. 0 table deleted. 134 19 rm: /tmp/rules.debug.tmp: No such file or directory rm: /tmp/rules.debug.tmp: No such file or directory 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189
Sep 21 08:49:45 root: Countryblock was found not running
Sep 21 08:49:40 root: IP-Blocklist was found not running
Sep 21 08:49:34 check_reload_status: Reloading filter
Sep 21 08:49:27 check_reload_status: Syncing firewall
Sep 21 08:49:26 php: /pkg_mgr_install.php: Beginning package installation for Country Block.
Sep 21 08:49:25 check_reload_status: Syncing firewall
Sep 21 08:47:26 check_reload_status: Syncing firewall
Sep 21 08:46:33 check_reload_status: Syncing firewall
Sep 21 08:46:33 php: /packages/ipblocklist/ipblocklist.php: The command 'rm errorOUT.txt' returned exit code '1', the output was 'rm: errorOUT.txt: No such file or directory'
Sep 21 08:46:33 php: /packages/ipblocklist/ipblocklist.php: The command 'rm -R /usr/local/www/packages/ipblocklist/lists' returned exit code '1', the output was 'rm: /usr/local/www/packages/ipblocklist/lists: No such file or directory'
Sep 21 08:46:33 php: /packages/ipblocklist/ipblocklist.php: The command 'ipfw -f flush' returned exit code '69', the output was 'ipfw: setsockopt(IP_FW_FLUSH): Protocol not available'
Sep 21 08:43:17 check_reload_status: Syncing firewall
Sep 21 08:43:17 php: /packages/ipblocklist/ipblocklist.php: The command 'ipfw -f flush' returned exit code '69', the output was 'ipfw: setsockopt(IP_FW_FLUSH): Protocol not available'
Sep 21 08:41:34 root: IP-Blocklist was found not running
Sep 21 08:41:28 check_reload_status: Syncing firewall
Sep 21 08:41:28 check_reload_status: Reloading filter
Sep 21 08:41:27 check_reload_status: Syncing firewall
Sep 21 08:39:48 check_reload_status: Syncing firewall
Sep 21 08:39:48 php: /pkg_mgr_install.php: Beginning package installation for IP-Blocklist.

tommyboy180

Are you blocking outbound traffic?

mentalhemroids

@tommyboy180:

Are you blocking outbound traffic?

Yes, I tried this website and made sure it resolved to Russia and it still lets me go to it.
http://www.prodisney.ru/index.php?page=clones.php

My system logs keep showing this.. and after saving settings I get the exit code message.

Sep 21 09:28:03 php: /packages/countryblock/countryblock.php: The command 'rm lists/temp' returned exit code '1', the output was 'rm: lists/temp: No such file or directory'
Sep 21 09:27:47 php: /packages/countryblock/countryblock.php: The command 'rm lists/temp' returned exit code '1', the output was 'rm: lists/temp: No such file or directory'
Sep 21 09:05:39 root: Countryblock was found not running
Sep 21 09:05:34 root: IP-Blocklist was found not running
Sep 21 09:05:22 root: Countryblock was found not running
Sep 21 09:05:16 root: IP-Blocklist was found not running

mentalhemroids

Just tried the site again after saving and applying - squid isn't letting it come up now. I'm going to try a couple others.

194.226.127.34 - http://eng.kremlin.ru/ is blocked now.
203.199.104.241 - http://www.airindia.in is blocked… so maybe it is working...

I'll keep testing. Thanks!

Update Since a little bit ago I'm getting these again...

Sep 21 10:09:45 php: /pkg_edit.php: Reloading Squid for configuration sync
Sep 21 10:09:45 check_reload_status: Reloading filter
Sep 21 10:09:45 check_reload_status: Syncing firewall
Sep 21 10:09:44 check_reload_status: Reloading filter
Sep 21 10:09:44 php: /pkg_edit.php: Reloading Squid for configuration sync
Sep 21 10:01:40 root: Countryblock was found not running
Sep 21 10:01:35 root: IP-Blocklist was found not running
Sep 21 10:01:23 root: Countryblock was found not running
Sep 21 10:01:17 root: IP-Blocklist was found not running
Sep 21 10:01:12 php: /pkg_edit.php: Reloading Squid for configuration sync
Sep 21 10:01:11 check_reload_status: Reloading filter
Sep 21 10:01:11 check_reload_status: Syncing firewall
Sep 21 10:01:11 check_reload_status: Reloading filter
Sep 21 10:01:11 php: /pkg_edit.php: Reloading Squid for configuration sync

tommyboy180

The way you have your system configured (addons or packages) is causing your filter to be re-generated. Countryblock only reacts to that event and restarts. What your seeing is the package responding to system events.