Country Block
-
Could it be setup so that those rules were applied at the end so that any allows above it in the firewall rules would allow the traffic. I am ssuming 2 things of course. 1. That the rules apply top down… 2. That the package can be configured as such.
Great package when I learned a couple of painful lessons.... ;D
-
g4m3c4ck
Not sure how to go about doing this? ???
Thanks,
Matt
Right now there is no really decent way to remove IPs from the countryblock table. I will have to make a whitelist addon for the package. Hopefully I can sit down and do that soon. I just haven't had the time.
-
This package has singlehandedly cut down 99,9% of all attemps to hack my SQL databases…. Now I just need the IE fix. Then I will have to promote Tommy to a godlike status.....:D
Thx buddy. This is absolutely one of the best features of PFSense !!
-
The hard way of solving your problem would be to ssh into your router or manually go to the computer and goto shell.
cd /usr/local/www/packages/countryblock/lists
cp countries.txt countries.txt.bak
nano countries.txt
then find the ip range in question and remove
Keep in mind changes in the country block package will revert these steps.
-
Encountered an error in the system logs:
php: /packages/countryblock/countryblock.php: The command 'sh execute.sh' returned exit code '2', the output was '0 table deleted. export: 4: bad variable name'
Country Block keeps on saying "Current Status = NOT running", pkg reinstall didnt do the trick.
(pfSense 2.0-BETA3 built on Fri Jun 25 16:38:53 EDT 2010) -
Is this in Firefox or IE?
Encountered an error in the system logs:
php: /packages/countryblock/countryblock.php: The command 'sh execute.sh' returned exit code '2', the output was '0 table deleted. export: 4: bad variable name'
Country Block keeps on saying "Current Status = NOT running", pkg reinstall didnt do the trick.
(pfSense 2.0-BETA3 built on Fri Jun 25 16:38:53 EDT 2010) -
Firefox.
-
Are you running any other packages on the box?
-
RRD Summary and snort
-
Make a backup and then uninstall Snort. Test again.
-
after deleting snort and reinstalling country block more errors:
Jun 27 20:10:42 php: /packages/countryblock/countryblock.php: The command 'sh execute.sh' returned exit code '2', the output was '0 table deleted. export: 4: bad variable name'
Jun 27 20:09:04 php: /packages/countryblock/countryblock.php: The command 'rm errorOUT.txt' returned exit code '1', the output was 'rm: errorOUT.txt: No such file or directory'
Jun 27 20:09:04 php: /packages/countryblock/countryblock.php: The command 'rm -R /usr/local/www/packages/countryblock/lists' returned exit code '1', the output was 'rm: /usr/local/www/packages/countryblock/lists: No such file or directory'
Jun 27 20:08:58 php: /packages/countryblock/countryblock.php: The command 'rm errorOUT.txt' returned exit code '1', the output was 'rm: errorOUT.txt: No such file or directory'
Jun 27 20:08:58 php: /packages/countryblock/countryblock.php: The command 'rm -R /usr/local/www/packages/countryblock/lists' returned exit code '1', the output was 'rm: /usr/local/www/packages/countryblock/lists: No such file or directory'
Jun 27 20:07:53 php: /pkg_mgr_install.php: Beginning package installation for Country Block. -
Can you make a clean install of PFsense and try again??? Just to exclude a corrupted install….
-
Now that you mentioned it, I did a fresh install a few hours ago, BUT I used an old config file from BETA-1 release so this could be the issue. I will reinstall tommorow and try country block before restoring the old config file again.
-
;)
-
Tommy - Get your butt moving man. We need to be able to edit the block lists. I know your just slacking at home. :o
-
lol. I know. It's hard to find time to sit down and get it done when I have other projects that require my attention. I'll sit down tonight and make some progress. Thanks for the motivation.
-
You know it browski. I really have to wonder if the tree raddled your brains. :o
-
after deleting snort and reinstalling country block more errors:
Jun 27 20:10:42 php: /packages/countryblock/countryblock.php: The command 'sh execute.sh' returned exit code '2', the output was '0 table deleted. export: 4: bad variable name'
Jun 27 20:09:04 php: /packages/countryblock/countryblock.php: The command 'rm errorOUT.txt' returned exit code '1', the output was 'rm: errorOUT.txt: No such file or directory'
Jun 27 20:09:04 php: /packages/countryblock/countryblock.php: The command 'rm -R /usr/local/www/packages/countryblock/lists' returned exit code '1', the output was 'rm: /usr/local/www/packages/countryblock/lists: No such file or directory'
Jun 27 20:08:58 php: /packages/countryblock/countryblock.php: The command 'rm errorOUT.txt' returned exit code '1', the output was 'rm: errorOUT.txt: No such file or directory'
Jun 27 20:08:58 php: /packages/countryblock/countryblock.php: The command 'rm -R /usr/local/www/packages/countryblock/lists' returned exit code '1', the output was 'rm: /usr/local/www/packages/countryblock/lists: No such file or directory'
Jun 27 20:07:53 php: /pkg_mgr_install.php: Beginning package installation for Country Block.New install on updated v 2.0 gives same result as seen by Novak. Reinstalled as check against bad install but no go…
-
after deleting snort and reinstalling country block more errors:
Jun 27 20:10:42 php: /packages/countryblock/countryblock.php: The command 'sh execute.sh' returned exit code '2', the output was '0 table deleted. export: 4: bad variable name'
Jun 27 20:09:04 php: /packages/countryblock/countryblock.php: The command 'rm errorOUT.txt' returned exit code '1', the output was 'rm: errorOUT.txt: No such file or directory'
Jun 27 20:09:04 php: /packages/countryblock/countryblock.php: The command 'rm -R /usr/local/www/packages/countryblock/lists' returned exit code '1', the output was 'rm: /usr/local/www/packages/countryblock/lists: No such file or directory'
Jun 27 20:08:58 php: /packages/countryblock/countryblock.php: The command 'rm errorOUT.txt' returned exit code '1', the output was 'rm: errorOUT.txt: No such file or directory'
Jun 27 20:08:58 php: /packages/countryblock/countryblock.php: The command 'rm -R /usr/local/www/packages/countryblock/lists' returned exit code '1', the output was 'rm: /usr/local/www/packages/countryblock/lists: No such file or directory'
Jun 27 20:07:53 php: /pkg_mgr_install.php: Beginning package installation for Country Block.New install on updated v 2.0 gives same result as seen by Novak. Reinstalled as check against bad install but no go…
I have the same problem!! :(
-
Nice package and great addition to pfSense!
I did have some trouble with the package starting, and after a little research found the problem in execute.sh:
This line:
export t=`grep -n 'User Aliases' /tmp/rules.debug |grep -o '[0-9]'`I changed to:
export t=`grep -n 'User Aliases' /tmp/rules.debug |grep -o '[0-9]\{1,2\}'`The service would fail to start otherwise. Running execute.sh (/usr/local/etc/rc.d/countryblock.sh) manually from CLI produced the error:
export: 0: bad variable nameand that's because the line number is actually 10 in my /tmp/rules.debug, but due to the regular expression grep was returning 1\n0 (one newline zero), so $t was being assigned "0" instead of "10."
EDIT: Are my changes to execute.sh persistent? Eg, if I reboot will I need to edit again?
On another note the countryipblock.net web site states that no automated process may be used to download the list and may not be redistributed. (see Policies Affecting Access and Use of the Website and Database) Not that it's really any of my business and I am not affiliated with countryipblocks.net, but I thought I would mention it since it's not exactly visible on the web site unless you look for it. I don't know if this affects the package or not. (I hope not!)
Anyway, thanks Tom for this awesome package!
-Rich