Possible bug?
-
Just tried to temp. disable one NAT rule and this is what I got:
-
Which version of pfSense?
What is "Proxyblocker"? Is it an alias of your own, or something from an add-on package like pfBlocker?
-
Which version of pfSense?
I'm on the latest v2.1.4-RELEASE (i386)
What is "Proxyblocker"? Is it an alias of your own, or something from an add-on package like pfBlocker?
I'm not sure what "Proxyblocker" is. I do have pfBlocker installed but never took time to enable and configure it so it must have something to do with it.
-
Uninstall countryblock, that's what is doing it. That's been deprecated and probably should be disabled.
-
@cmb:
Uninstall countryblock, that's what is doing it. That's been deprecated and probably should be disabled.
Ok, I will. That means most likely it won't get any better with new versions of pfSense since its problem with countryblock?
I really liked the idea behind it that I could block certain countries from accessing my network. -
Take a look at the "pfBlocker" package ;)
-
-
pfBlocker's, Country Blocking is also deprecated for almost 2 years now.
-
pfBlocker's, Country Blocking is also deprecated for almost 2 years now.
Ok, in other words its just matter of time before it would not be supported by pfSense at all?
-
It's that package, not country blocking in general, that's no longer supported or maintained. pfblocker replaces it (though its data is very old at this point, other options better if you need data with a very high degree of accuracy). The country lists in pfblocker stopped being updated when countryipblocks stopped distributing data for free. There will be an alternative to that coming before too long though, stay tuned.
I disabled the Countryblock package in the repo since it's been so long no one should be using that anymore.
-
@cmb:
There will be an alternative to that coming before too long though, stay tuned.
I think you mentioned that before. I use the Maxmind GeoIP Country Lists which is 98% accurate for Country Codes. I notice that pfBlocker is pointing to :
For example:
https://packages.pfsense.org/packages/config/pf-blocker/lists/Africa_cidr.txtWould these files be at the same location for the new Setup?
-
@cmb:
It's that package, not country blocking in general, that's no longer supported or maintained. pfblocker replaces it (though its data is very old at this point, other options better if you need data with a very high degree of accuracy). The country lists in pfblocker stopped being updated when countryipblocks stopped distributing data for free. There will be an alternative to that coming before too long though, stay tuned.
I disabled the Countryblock package in the repo since it's been so long no one should be using that anymore.
Thanks for the explanation!