Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Country Block

    pfSense Packages
    79
    691
    570.6k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      tommyboy180
      last edited by

      Version 2.2 released.

      • Fixed uninstall bug (http://forum.pfsense.org/index.php/topic,24769.msg207044.html#msg207044)

      • Updated hosting for required files - Now stored on github (http://forum.pfsense.org/index.php/topic,25732.msg208214.html#msg208214)

      -Tom Schaefer
      SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

      Please support pfBlocker | File Browser | Strikeback

      1 Reply Last reply Reply Quote 0
      • S
        Supermule Banned
        last edited by

        I get this after reinstall and reboot…

        Aug 28 08:29:01 root: Countryblock was found not running
        Aug 28 08:28:30 root: Countryblock was found not running
        Aug 28 08:28:30 login: login on ttyv0 as root
        Aug 28 08:28:29 check_reload_status: check_reload_status is starting
        Aug 28 08:28:29 last message repeated 18 times
        Aug 28 08:28:29 php: : The Country Block package is missing required dependencies and must be reinstalled.
        Aug 28 08:28:29 last message repeated 29 times

        It is running…at least it says so :)

        1 Reply Last reply Reply Quote 0
        • L
          ljbowdish
          last edited by

          I had an OOPS this AM. ;D ;D
          I was updating my country block, and inadvertently selected all.  It worked perfectly.  Unfortunately, we couldn't get to google, or email.  Took me  a few minutes to get it right.

          1 Reply Last reply Reply Quote 0
          • T
            tommyboy180
            last edited by

            @ljbowdish:

            I had an OOPS this AM. ;D ;D
            I was updating my country block, and inadvertently selected all.  It worked perfectly.  Unfortunately, we couldn't get to google, or email.  Took me  a few minutes to get it right.

            Ha! That's awesome.

            -Tom Schaefer
            SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

            Please support pfBlocker | File Browser | Strikeback

            1 Reply Last reply Reply Quote 0
            • E
              elfchen
              last edited by

              I can not start it on latest PFSense.

              Get:

              Current Stauts = NOT running
              pfctl: DICSETSTATUSIF
              You are blocking 0 Networks

              On an other PFSense engine with same release it worked well without problems - but on this firewall I get this error and don't know why.

              Already tried: Steps on FAQ and reinstall.

              As long as I did not click on "enable" the error is not shown. I can change all settings, but when I am ready and click on Enable it will not work and report these error.

              1 Reply Last reply Reply Quote 0
              • T
                tommyboy180
                last edited by

                @elfchen:

                I can not start it on latest PFSense.

                Get:

                Current Stauts = NOT running
                pfctl: DICSETSTATUSIF
                You are blocking 0 Networks

                On an other PFSense engine with same release it worked well without problems - but on this firewall I get this error and don't know why.

                Already tried: Steps on FAQ and reinstall.

                As long as I did not click on "enable" the error is not shown. I can change all settings, but when I am ready and click on Enable it will not work and report these error.

                That's a first for me. I will have to do some investigation. What have you done to try and fix the error?

                -Tom Schaefer
                SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                Please support pfBlocker | File Browser | Strikeback

                1 Reply Last reply Reply Quote 0
                • E
                  elfchen
                  last edited by

                  Tried to reinstall. Tried to work with only one networkcard. Firewall itself works perfect:

                  Version

                  1.2.3-RELEASE
                  built on Sun Dec 6 23:21:36 EST 2009

                  Platform

                  pfSense

                  Uptime

                  State table size

                  Show states

                  MBUF Usage

                  319 /2310

                  @tommyboy180:

                  @elfchen:

                  I can not start it on latest PFSense.

                  Get:

                  Current Stauts = NOT running
                  pfctl: DICSETSTATUSIF
                  You are blocking 0 Networks

                  On an other PFSense engine with same release it worked well without problems - but on this firewall I get this error and don't know why.

                  Already tried: Steps on FAQ and reinstall.

                  As long as I did not click on "enable" the error is not shown. I can change all settings, but when I am ready and click on Enable it will not work and report these error.

                  That's a first for me. I will have to do some investigation. What have you done to try and fix the error?

                  1 Reply Last reply Reply Quote 0
                  • W
                    woc38
                    last edited by

                    This week I updated my pfSense 2.0RC3 to pfSense 2.0-Release. Only having a few firewall rules, no other packages.
                    Today, after some reading, I installed Country Block via the packages-web-interface.

                    • No errors were shown in the install window;
                    • For testing I only checked China, and clicked on Commit Countries;
                    • I checked "Enable Country Block" and clicked on Save/Update;
                    • I clicked on the Apply Changes button that appears, but after the click, it won't disappear;
                    • At the bottom of the page I see:
                      Current Status = Running
                      You are blocking 3408 Networks

                    So far, all seems fine.
                    But after this I checked the system logs (partial copy):

                    Sep 21 13:02:06 php: /pkg_mgr_install.php: Beginning package installation for Country Block.
                    Sep 21 13:02:07 check_reload_status: Syncing firewall
                    Sep 21 13:02:33 login: login on ttyu0 as root
                    Sep 21 13:02:33 check_reload_status: Syncing firewall
                    Sep 21 13:02:34 check_reload_status: Reloading filter
                    Sep 21 13:02:35 check_reload_status: Syncing firewall
                    Sep 21 13:02:41 root: Countryblock was found not running
                    Sep 21 13:02:43 php: : The command '/usr/local/pkg/pf/countryblock.sh start' returned exit code '1', the output was 'not running root: Countryblock was found not running Status: 404 Not Found Content-type: text/html  No input file specified. 0 table deleted. 97 22 rm: /tmp/rules.debug.tmp: No such file or directory rm: /tmp/rules.debug.tmp: No such file or directory 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168'
                    Sep 21 13:04:28 php: /packages/countryblock/countryblock.php: The command 'rm -R /usr/local/www/packages/countryblock/lists' returned exit code '1', the output was 'rm: /usr/local/www/packages/countryblock/lists: No such file or directory'
                    Sep 21 13:04:29 php: /packages/countryblock/countryblock.php: The command 'rm errorOUT.txt' returned exit code '1', the output was 'rm: errorOUT.txt: No such file or directory'
                    Sep 21 13:05:48 check_reload_status: Reloading filter
                    Sep 21 13:05:53 php: /packages/countryblock/countryblock.php: The command 'rm lists/temp' returned exit code '1', the output was 'rm: lists/temp: No such file or directory'
                    Sep 21 13:05:57 check_reload_status: Reloading filter
                    Sep 21 13:05:59 root: Countryblock was found not running

                    The last entry keeps appearing, even after I did the trick with the editing/saving of a random firewall rule

                    How can I tell the package is running? And what about the errors in the log file?

                    And, maybe a newbie question, I checked the log option in settings, but what does it log exactly and where?

                    1 Reply Last reply Reply Quote 0
                    • T
                      tommyboy180
                      last edited by

                      The logs can be ignored. There is a lot of output that is a little confusing. You get a lot of errors because there are several different installs out there and the package is built for stability on multiple install types. Those errors are repeated because the firewall filter gets regenerated when a system change occurs, which can be very frequent depending on your setup, and countryblock runs its script to ensure it's running when this happens.

                      Basically if it says it's running and there are networks being blocked then it's working 100% because it queries that directly from the firewall rules.

                      -Tom Schaefer
                      SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                      Please support pfBlocker | File Browser | Strikeback

                      1 Reply Last reply Reply Quote 0
                      • M
                        mentalhemroids
                        last edited by

                        It still doesn't seem as though Country Block is working - I have all the spam recommended countries enabled, but can't seem to find one that I can block… Any suggestions on a site to test?  Running 2.0-RELEASE (i386) built on Tue Sep 13 17:28:43 EDT 2011.
                        I have tried to get both this and IP Blocklist to work... can't seem to get it going. The interface says they are running though.  Thanks!

                        Sep 21 09:05:39 root: Countryblock was found not running
                        Sep 21 09:05:34 root: IP-Blocklist was found not running
                        Sep 21 09:05:22 root: Countryblock was found not running
                        Sep 21 09:05:16 root: IP-Blocklist was found not running
                        Sep 21 09:05:11 php: /pkg_edit.php: Reloading Squid for configuration sync
                        Sep 21 09:05:11 check_reload_status: Reloading filter
                        Sep 21 09:05:11 check_reload_status: Syncing firewall
                        Sep 21 09:05:10 check_reload_status: Reloading filter
                        Sep 21 09:05:10 php: /pkg_edit.php: Reloading Squid for configuration sync
                        Sep 21 08:55:50 php: /packages/countryblock/countryblock.php: The command 'rm lists/temp' returned exit code '1', the output was 'rm: lists/temp: No such file or directory'
                        Sep 21 08:49:56 php: : The command '/usr/local/pkg/pf/countryblock.sh start' returned exit code '1', the output was 'not running root: Countryblock was found not running Status: 404 Not Found Content-type: text/html No input file specified. 0 table deleted. 134 19 rm: /tmp/rules.debug.tmp: No such file or directory rm: /tmp/rules.debug.tmp: No such file or directory 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189
                        Sep 21 08:49:45 root: Countryblock was found not running
                        Sep 21 08:49:40 root: IP-Blocklist was found not running
                        Sep 21 08:49:34 check_reload_status: Reloading filter
                        Sep 21 08:49:27 check_reload_status: Syncing firewall
                        Sep 21 08:49:26 php: /pkg_mgr_install.php: Beginning package installation for Country Block.
                        Sep 21 08:49:25 check_reload_status: Syncing firewall
                        Sep 21 08:47:26 check_reload_status: Syncing firewall
                        Sep 21 08:46:33 check_reload_status: Syncing firewall
                        Sep 21 08:46:33 php: /packages/ipblocklist/ipblocklist.php: The command 'rm errorOUT.txt' returned exit code '1', the output was 'rm: errorOUT.txt: No such file or directory'
                        Sep 21 08:46:33 php: /packages/ipblocklist/ipblocklist.php: The command 'rm -R /usr/local/www/packages/ipblocklist/lists' returned exit code '1', the output was 'rm: /usr/local/www/packages/ipblocklist/lists: No such file or directory'
                        Sep 21 08:46:33 php: /packages/ipblocklist/ipblocklist.php: The command 'ipfw -f flush' returned exit code '69', the output was 'ipfw: setsockopt(IP_FW_FLUSH): Protocol not available'
                        Sep 21 08:43:17 check_reload_status: Syncing firewall
                        Sep 21 08:43:17 php: /packages/ipblocklist/ipblocklist.php: The command 'ipfw -f flush' returned exit code '69', the output was 'ipfw: setsockopt(IP_FW_FLUSH): Protocol not available'
                        Sep 21 08:41:34 root: IP-Blocklist was found not running
                        Sep 21 08:41:28 check_reload_status: Syncing firewall
                        Sep 21 08:41:28 check_reload_status: Reloading filter
                        Sep 21 08:41:27 check_reload_status: Syncing firewall
                        Sep 21 08:39:48 check_reload_status: Syncing firewall
                        Sep 21 08:39:48 php: /pkg_mgr_install.php: Beginning package installation for IP-Blocklist.

                        1 Reply Last reply Reply Quote 0
                        • T
                          tommyboy180
                          last edited by

                          Are you blocking outbound traffic?

                          -Tom Schaefer
                          SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                          Please support pfBlocker | File Browser | Strikeback

                          1 Reply Last reply Reply Quote 0
                          • M
                            mentalhemroids
                            last edited by

                            @tommyboy180:

                            Are you blocking outbound traffic?

                            Yes, I tried this website and made sure it resolved to Russia and it still lets me go to it.
                            http://www.prodisney.ru/index.php?page=clones.php

                            My system logs keep showing this.. and after saving settings I get the exit code message.

                            Sep 21 09:28:03 php: /packages/countryblock/countryblock.php: The command 'rm lists/temp' returned exit code '1', the output was 'rm: lists/temp: No such file or directory'
                            Sep 21 09:27:47 php: /packages/countryblock/countryblock.php: The command 'rm lists/temp' returned exit code '1', the output was 'rm: lists/temp: No such file or directory'
                            Sep 21 09:05:39 root: Countryblock was found not running
                            Sep 21 09:05:34 root: IP-Blocklist was found not running
                            Sep 21 09:05:22 root: Countryblock was found not running
                            Sep 21 09:05:16 root: IP-Blocklist was found not running

                            1 Reply Last reply Reply Quote 0
                            • M
                              mentalhemroids
                              last edited by

                              Just tried the site again after saving and applying - squid isn't letting it come up now.  I'm going to try a couple others.

                              194.226.127.34 - http://eng.kremlin.ru/ is blocked now.
                              203.199.104.241 - http://www.airindia.in is blocked… so maybe it is working...

                              I'll keep testing.  Thanks!

                              Update Since a little bit ago I'm getting these again...

                              Sep 21 10:09:45 php: /pkg_edit.php: Reloading Squid for configuration sync
                              Sep 21 10:09:45 check_reload_status: Reloading filter
                              Sep 21 10:09:45 check_reload_status: Syncing firewall
                              Sep 21 10:09:44 check_reload_status: Reloading filter
                              Sep 21 10:09:44 php: /pkg_edit.php: Reloading Squid for configuration sync
                              Sep 21 10:01:40 root: Countryblock was found not running
                              Sep 21 10:01:35 root: IP-Blocklist was found not running
                              Sep 21 10:01:23 root: Countryblock was found not running
                              Sep 21 10:01:17 root: IP-Blocklist was found not running
                              Sep 21 10:01:12 php: /pkg_edit.php: Reloading Squid for configuration sync
                              Sep 21 10:01:11 check_reload_status: Reloading filter
                              Sep 21 10:01:11 check_reload_status: Syncing firewall
                              Sep 21 10:01:11 check_reload_status: Reloading filter
                              Sep 21 10:01:11 php: /pkg_edit.php: Reloading Squid for configuration sync

                              1 Reply Last reply Reply Quote 0
                              • T
                                tommyboy180
                                last edited by

                                The way you have your system configured (addons or packages) is causing your filter to be re-generated. Countryblock only reacts to that event and restarts. What your seeing is the package responding to system events.

                                -Tom Schaefer
                                SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                Please support pfBlocker | File Browser | Strikeback

                                1 Reply Last reply Reply Quote 0
                                • M
                                  mentalhemroids
                                  last edited by

                                  @tommyboy180:

                                  The way you have your system configured (addons or packages) is causing your filter to be re-generated. Countryblock only reacts to that event and restarts. What your seeing is the package responding to system events.

                                  So you are saying that these kind of messages are normal to see and are not concerning?  I'm just trying to make sure I don't put more effort than needed with troubleshooting.  Thanks! :)

                                  Sep 21 11:11:19 php: : The command '/usr/local/pkg/pf/countryblock.sh start' returned exit code '1', the output was 'not running root: Countryblock was found not running Status: 404 Not Found Content-type: text/html No input file specified. 1 table deleted. 134 19 rm: /tmp/rules.debug.tmp: No such file or directory rm: /tmp/rules.debug.tmp: No such file or directory 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189
                                  Sep 21 11:11:19 root: Countryblock was found not running
                                  Sep 21 11:11:19 php: : The command '/usr/local/pkg/pf/IP-Blocklist.sh start' returned exit code '1', the output was 'not running root: IP-Blocklist was found not running 0 table deleted. 1 table deleted. rm: /tmp/rules.debug.tmp: No such file or directory rm: /tmp/rules.debug.tmp: No such file or directory 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 20
                                  Sep 21 11:11:19 root: IP-Blocklist was found not running
                                  Sep 21 11:11:13 check_reload_status: Reloading filter
                                  Sep 21 11:11:11 check_reload_status: Syncing firewall

                                  1 Reply Last reply Reply Quote 0
                                  • M
                                    mentalhemroids
                                    last edited by

                                    Just checked it again and it stopped running and is not even enabled anymore and I can get to sites again - I have this error above SAVE.

                                    Current Status = NOT running
                                    /tmp/rules.debug:119: cannot load "/usr/local/www/packages/ipblocklist/lists/ipfw.ipfw": No such file or directory
                                    You are blocking 0 Networks

                                    When I try to restart or enable and SAVE the message comes up again and the enable box is deselected.

                                    1 Reply Last reply Reply Quote 0
                                    • W
                                      woc38
                                      last edited by

                                      @tommyboy180:

                                      The logs can be ignored. There is a lot of output that is a little confusing. You get a lot of errors because there are several different installs out there and the package is built for stability on multiple install types. Those errors are repeated because the firewall filter gets regenerated when a system change occurs, which can be very frequent depending on your setup, and countryblock runs its script to ensure it's running when this happens.

                                      Basically if it says it's running and there are networks being blocked then it's working 100% because it queries that directly from the firewall rules.

                                      Ok, thanks. I will 'ignore' the entries in the system log and look at the package page for its status.

                                      1 Reply Last reply Reply Quote 0
                                      • T
                                        tommyboy180
                                        last edited by

                                        Countryblock Version 2.4 released!

                                        • Country selection is saved on system to ease updates

                                        • Corrected issues with uninstall

                                        • Removed Email

                                        • Widget is now available for pfsense 2.0

                                        -Tom Schaefer
                                        SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                        Please support pfBlocker | File Browser | Strikeback

                                        1 Reply Last reply Reply Quote 0
                                        • W
                                          woc38
                                          last edited by

                                          @tommyboy180:

                                          Countryblock Version 2.4 released!

                                          • Country selection is saved on system to ease updates

                                          • Corrected issues with uninstall

                                          • Removed Email

                                          • Widget is now available for pfsense 2.0

                                          Thanks! I updated the package (by using the pkg button in the Installed Packages menu). Seems to work fine for now.

                                          Can you tell me more about the Widget? I'm running 2.0 Release, but I can't find the widget in the "add-list" in the dashboard…

                                          1 Reply Last reply Reply Quote 0
                                          • T
                                            tommyboy180
                                            last edited by

                                            If you did a re-install from the menu then you will need to uninstall and re-install. That may be why you don't have the widget.

                                            FYI everyone: The re-install package button does not work for a reason. You will need to uninstall and re-install.

                                            -Tom Schaefer
                                            SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                            Please support pfBlocker | File Browser | Strikeback

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post