Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PfBlockerNG

    Scheduled Pinned Locked Moved pfBlockerNG
    1.2k Posts 210 Posters 1.8m Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      stuck
      last edited by

      Hi fellas,
      I upgraded from 2.1.5 (with pfblocker) to 2.2 just yesterday.  After the upgrade, I saw errors relating to pfblocker in the dashboard.  So I went looking for the package.  It wasn't installed obviously because it had been replaced by pfblockerNG.  So I installed pfblockerNG.  everything seems to work fine but I continue to get these notices on the banner:

      [ There were error(s) loading the rules: /tmp/rules.debug:74: cannot define table pfBlockerpipfilter: Cannot allocate memory - The line in question reads [74]: table persist file /var/db/aliastables/pfBlockerpipfilter.txt]"
      

      Any suggestions on how to fix this error would be appreciated.
      Thank you.

      1 Reply Last reply Reply Quote 0
      • marcellocM
        marcelloc
        last edited by

        Check if you still have aliases and rules from pfBlocker version.
        If so, remove it.

        Treinamentos de Elite: http://sys-squad.com

        Help a community developer! ;D

        1 Reply Last reply Reply Quote 0
        • M
          marcus556
          last edited by

          Ive been browsing through this forum in hopes to find some type of guide to set this up.  It all sounds very great but i have no clue where to start.  I actually made the jump from Untangle over to Pfsense because of all the talk about the adblocking with pfsense and now this package that was just released.  Is there a link anyone can point me in the direction to so i can get everything setup to block ads.  Ive got pfblockerNG installed but thats about it. Thanks in advance

          EDIT

          Just read in the thread below that ad blocking is going to be supported until version 2.0.  Is this correct?

          https://forum.pfsense.org/index.php?topic=80301.0

          1 Reply Last reply Reply Quote 0
          • BBcan177B
            BBcan177 Moderator
            last edited by

            @marcus556:

            Just read in the thread below that ad blocking is going to be supported until version 2.0.  Is this correct?

            Yes it will be available in v2.0… You can try the IBlock Ads list which is IP Based. Its not the greatest.

            "Experience is something you don't get until just after you need it."

            Website: http://pfBlockerNG.com
            Twitter: @BBcan177  #pfBlockerNG
            Reddit: https://www.reddit.com/r/pfBlockerNG/new/

            1 Reply Last reply Reply Quote 0
            • M
              marcus556
              last edited by

              @BBcan177:

              @marcus556:

              Just read in the thread below that ad blocking is going to be supported until version 2.0.  Is this correct?

              Yes it will be available in v2.0… You can try the IBlock Ads list which is IP Based. Its not the greatest.

              Yes, I've got it all worked out now very good work sir on this package.

              As far as the AdBlock on iblock, you are right it isn't the greatest.  I have a question since your doing most of the design it seems, when 2.0 expected for one and two are the list going to be limited to only IP lists or could we say use the AdBlock plus list aka easylist?

              1 Reply Last reply Reply Quote 0
              • BBcan177B
                BBcan177 Moderator
                last edited by

                @marcus556:

                Yes, I've got it all worked out now very good work sir on this package.

                As far as the AdBlock on iblock, you are right it isn't the greatest.  I have a question since your doing most of the design it seems, when 2.0 expected for one and two are the list going to be limited to only IP lists or could we say use the AdBlock plus list aka easylist?

                Yes I am the Developer of the package .. I haven't put much development into it for the past couple weeks, since v1.0 was released.. Maybe another month or so… I want to make sure that its stable and all the tires kicked every which way by the beta testers that helped me with v1.0  :)

                You can see some more Features in this link:
                https://forum.pfsense.org/index.php?topic=78356.msg477682#msg477682

                I have all of the features in the link working and will be working on Easylist next...

                "Experience is something you don't get until just after you need it."

                Website: http://pfBlockerNG.com
                Twitter: @BBcan177  #pfBlockerNG
                Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                1 Reply Last reply Reply Quote 0
                • M
                  marcus556
                  last edited by

                  @BBcan177:

                  @marcus556:

                  Yes, I've got it all worked out now very good work sir on this package.

                  As far as the AdBlock on iblock, you are right it isn't the greatest.  I have a question since your doing most of the design it seems, when 2.0 expected for one and two are the list going to be limited to only IP lists or could we say use the AdBlock plus list aka easylist?

                  Yes I am the Developer of the package .. I haven't put much development into it for the past couple weeks, since v1.0 was released.. Maybe another month or so… I want to make sure that its stable and all the tires kicked every which way by the beta testers that helped me with v1.0  :)

                  You can see some more Features in this link:
                  https://forum.pfsense.org/index.php?topic=78356.msg477682#msg477682

                  I have all of the features in the link working and will be working on Easylist next...

                  Very nice, keep up the good work! Thanks for everything!

                  1 Reply Last reply Reply Quote 0
                  • M
                    marcus556
                    last edited by

                    Has anyone had any impact on the network speed especially internet activity since enabling this? I disabled logging in hopes of speeding things up, could this be slowing things down?

                    1 Reply Last reply Reply Quote 0
                    • P
                      pfsense_fan009
                      last edited by

                      I could nog fully install this: hangs at converting…

                      Pfsense 2.x on Alix 2d13 (dual wan with failover).

                      1 Reply Last reply Reply Quote 0
                      • N
                        newkansan
                        last edited by

                        Be gentle, this is my first post here. :)

                        When I go to the Alerts tab in pfBlockerNG, it shows the same set of Alerts, all dated Jan 28th.  There are a total of 59 alerts.  I installed pfBlockerNG in early February.  The pfBlockerNG Dashboard Widget does seem to be accurate, with constantly changing counts under the Packets heading, which reset to zero when I update the rules.  In other words, it seems to be working as it should, but the Alerts tab seems to be stuck on the initial set of 59 entries, all dated Jan 28th (not sure why Jan 28th when I installed the package in Feb?).  I've updated pfBlockerNG a couple of times since my initial install, but the same Alerts continue to show.

                        I did have the original pfBlocker app installed back on the 2.1.5 release, and did not remove it prior to upgrading to 2.2.  At some point after upgrading to 2.2, I uninstalled pfBlocker, then installed pfBlockerNG.  I noticed immediately after installing NG those Alerts dated Jan 28th, which I thought was weird considering that date was many days old.  But I've patiently waited a couple of updates to see if it would resolve itself.  Since it hasn't yet, I'm posting here.

                        Any ideas?

                        Thanks!

                        1 Reply Last reply Reply Quote 0
                        • W
                          wcrowder
                          last edited by

                          I can't imagine a scenario where this package would slow down your network. Did you make any other changes the day you installed pfBkockerNG?

                          @marcus556:

                          Has anyone had any impact on the network speed especially internet activity since enabling this? I disabled logging in hopes of speeding things up, could this be slowing things down?

                          1 Reply Last reply Reply Quote 0
                          • M
                            marcus556
                            last edited by

                            @wcrowder:

                            I can't imagine a scenario where this package would slow down your network. Did you make any other changes the day you installed pfBkockerNG?

                            @marcus556:

                            Has anyone had any impact on the network speed especially internet activity since enabling this? I disabled logging in hopes of speeding things up, could this be slowing things down?

                            No other than adding other ip list but none of them are seeing the hits like the top 20 countries list.  I deselected all the top 20 countries and everything is running much smoother now.  I was seeing a lot of packet hits on the ipv4 side.  Im thinking mayb this had something to do with it.

                            1 Reply Last reply Reply Quote 0
                            • W
                              wcrowder
                              last edited by

                              How long did your wait? What did the logs say? Look at the geoip.log, did it finish downloading?

                              @pfsense_fan009:

                              I could nog fully install this: hangs at converting…

                              1 Reply Last reply Reply Quote 0
                              • W
                                wcrowder
                                last edited by

                                Just out of curiosity, go to <status><system logs=""><firewall logs="">then go to the bottom of the list and click <clear>. Might fix the problem.

                                @newkansan:

                                Be gentle, this is my first post here. :)

                                When I go to the Alerts tab in pfBlockerNG, it shows the same set of Alerts, all dated Jan 28th.  There are a total of 59 alerts.  I installed pfBlockerNG in early February.  The pfBlockerNG Dashboard Widget does seem to be accurate, with constantly changing counts under the Packets heading, which reset to zero when I update the rules.  In other words, it seems to be working as it should, but the Alerts tab seems to be stuck on the initial set of 59 entries, all dated Jan 28th (not sure why Jan 28th when I installed the package in Feb?).  I've updated pfBlockerNG a couple of times since my initial install, but the same Alerts continue to show.

                                I did have the original pfBlocker app installed back on the 2.1.5 release, and did not remove it prior to upgrading to 2.2.  At some point after upgrading to 2.2, I uninstalled pfBlocker, then installed pfBlockerNG.  I noticed immediately after installing NG those Alerts dated Jan 28th, which I thought was weird considering that date was many days old.  But I've patiently waited a couple of updates to see if it would resolve itself.  Since it hasn't yet, I'm posting here.

                                Any ideas?

                                Thanks!</clear></firewall></system></status>

                                1 Reply Last reply Reply Quote 0
                                • W
                                  wcrowder
                                  last edited by

                                  Add the countries back one at a time, maybe run MalwareBytes on your PC/PC's?

                                  @marcus556:

                                  @wcrowder:

                                  I can't imagine a scenario where this package would slow down your network. Did you make any other changes the day you installed pfBkockerNG?

                                  @marcus556:

                                  Has anyone had any impact on the network speed especially internet activity since enabling this? I disabled logging in hopes of speeding things up, could this be slowing things down?

                                  No other than adding other ip list but none of them are seeing the hits like the top 20 countries list.  I deselected all the top 20 countries and everything is running much smoother now.  I was seeing a lot of packet hits on the ipv4 side.  Im thinking mayb this had something to do with it.

                                  1 Reply Last reply Reply Quote 0
                                  • N
                                    newkansan
                                    last edited by

                                    @wcrowder:

                                    Just out of curiosity, go to <status><system logs=""><firewall logs="">then go to the bottom of the list and click <clear>. Might fix the problem.</clear></firewall></system></status>

                                    That did it.  Thank you!

                                    1 Reply Last reply Reply Quote 0
                                    • T
                                      Topper727
                                      last edited by

                                      With the new 1.04 and all my lists installed with de-duplication on I am getting good results

                                      screencap-192-168-1-1.png
                                      screencap-192-168-1-1.png_thumb

                                      Dell 2950 g3 server
                                      Intel(R) Xeon(R) CPU E5430 @ 2.66GHz
                                      Current: 2000 MHz, Max: 2667 MHz
                                      8 CPUs: 2 package(s) x 4 core(s)
                                      8152 MiB and 600meg 10k drive
                                      Pfsense 2.4 .. Hoping to get the phpvirtualbox going again.

                                      1 Reply Last reply Reply Quote 0
                                      • BBcan177B
                                        BBcan177 Moderator
                                        last edited by

                                        @pfsense_fan009:

                                        I could nog fully install this: hangs at converting…

                                        Hi pfsense_fan009, I think that you need to add some more memory to your box to be able to use pfBlockerNG or any other package like Snort/Suricata.

                                        "Experience is something you don't get until just after you need it."

                                        Website: http://pfBlockerNG.com
                                        Twitter: @BBcan177  #pfBlockerNG
                                        Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                                        1 Reply Last reply Reply Quote 0
                                        • M
                                          marcus556
                                          last edited by

                                          Since i turned de-duplication on, i havent been seeing any hits and the internet traffic is running much smoother.  Should i still being seeing some hits though?

                                          EDIT

                                          I changed the inbound and outbound interface to WAN and it seems to be working again.

                                          1 Reply Last reply Reply Quote 0
                                          • P
                                            pfsense_fan009
                                            last edited by

                                            I did wait for 20minutes:

                                            Converting MaxMind Country Databases for pfBlockerNG. This may take a few minutes…

                                            I'm running this on a alix 2d13 on 2.2 (I had pfBlocker installed before installing the pfblockerNG).
                                            Suggestions ?

                                            @wcrowder:

                                            How long did your wait? What did the logs say? Look at the geoip.log, did it finish downloading?

                                            @pfsense_fan009:

                                            I could nog fully install this: hangs at converting…

                                            Pfsense 2.x on Alix 2d13 (dual wan with failover).

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.