next »

[RonpfS]

Still showing 0

I picked one host in the Diagnostics: Tables pfblocker table.
I can ping from LAN or pfsense no problem
Nothing is showed as blocked in the firewall logs !??

rules are on WAN only

Code:

Reject and log * * * pfBlockerWAN * * none   pfBlockerWAN Outbound 
Block and log * pfBlockerWAN * * * * none   pfBlockerWAN Inbound 

[marcelloc]

If you are testing from lan, the blocking rule must be on lan.

It's a statefull firewall. All rules are set where communication begins.

[RonpfS]

So I should have

on the LAN 
Reject and log *    *    *    pfBlockerWAN    *    *    none         pfBlockerWAN LAN - Outbound 
on the
WAN Block and log *    pfBlockerWAN    *    *    *    *    none         pfBlockerWAN WAN - Inbound 

I see the widget Packet number changes ;o)

How do you block the pfsense box from accessing these aliases?

[marcelloc]

On floating rules, but it may not show in widget.

Floating rules are not impelmented in this version but you can apply pfBlocker alias on it.

[RonpfS]

I just created a rule on the Floating tab.... and the Packets blocked are updated in the widget  

However the rule

Reject and log *    *    *    pfBlockerWAN    *    *    none         pfBlockerWAN Floating Outbound

disappeared in the Floating tab after a save in pfBlocker .....!!!

same thing with

pfBlockerWAN Floating
pf BlockerWAN Whatever

bummer 

[marcelloc]

As I told you, floating rules are not implemented but i'll try the same test here and see what happens.

[ghm]

Hi,

ok, reinstalled on nanobsd and boot is much better. Got a new problem though: While the genaral and top spammers pages look good, I get the below instead of country lists for the others. Example below. Country.txt seems to load at install though, have also reinstalled package and rebooted - no change. Hence the drop down lists are missing.

Thanks!

[marcelloc]

The countryipblocks.net removed the lists  
I will point it to files.pfsense.

EDIT

Just did it.

wait 15 minutes and reinstall package.

[jimp]

Probably should not have users directly pull those lists anyhow, but keep them local and update them periodically. I have a feeling that too many people accessing their systems automatically may have been part of their decision to shut the service down.

[marcelloc]

Yeah, I'm doing it now.

[marcelloc]

Just released version 0.1.4.6 with fixes in float rules check and about section in gui.

[chpalmer]

From Countryblocks site...

We have temporarily suspended certain services as our donation stream has suffered a significant decrease here in the fourth quarter. We are pursuing some other financing options to help us focus on providing you with our services. This temporary suspension may last a few hours or a few days. If you would like to help us expedite the process please consider making a donation to Country IP Blocks through the PayPal link (on their site)

[tommyboy180]

If you can, please donate to Country IP Blocks

Site: http://www.countryipblocks.net/

We need to support this site.

[RonpfS]

Just released version 0.1.4.6 with fixes in float rules check and about section in gui.

Reinstalled, Floating rules are still there after a pfBlocker save, great 
Counter updates when pinging from pfsense box.
Counter is reseted on firewall rule changes.

When I select loopback interface, where does it put the rules?

[marcelloc]

When I select loopback interface, where does it put the rules?

Nothing 

As we only use pfsense's framework components, interface selection includes loopback.

If you select just loopback, pfBlocker send you a warning.