I use PFBlockerNG's GEOIP in Alias Native mode. I have Aliases for each country and I select/deselect countries as necessary. The problem is, de-selected countries' prefixes are still being added to the Alias.

I've done a PFBlockerNG "Reload" and a PfSense Filter Reload, no change. It's like PfBlockerNG is refusing to edit it's own aliases.

Ultimately I had to create new IPv4 Alias Native lists with the desired countries and create separate "allow" rules. Ideally I would like to just have the de-selected countries removed from the larger aliases as expected.

Has anyone run into this? I'm on 26.07.

AT&T fiber, I had the pfatt scripts running on 2.4.5 with a Pace 5268AC for years with no problem until the machine died. Current state is that I have a functioning 2.9 CE build on a new machine, but am having trouble getting back online.

My questions are, is it possible to run the pfatt.sh scripts on 2.9? Should I just pay for pfSense plus and use the native function?

I'm in over my head and I just want my network to work again =(

edit: just noticed I had a legacy sh file, fixed that but still can't get the netgraph to load

edit2: holy freakin crap I got it to work. delete lines 21 & 22 from pfatt.sh

/usr/local/bin/php -r "pfSense_ngctl_attach('.', '$ONT_IF');"
/usr/local/bin/php -r "pfSense_ngctl_attach('.', '$RG_IF');"

Is anyone else having issues with ACB?

I receive the following error message:

The AutoConfigBackup service could not find any backups for this device key.

When I checked another firewall at another site, it had the same error message. I reached out to [support@netgate.com](mailto:support@netgate.com), but my email got returned as undeliverable.

Affected devices are 4200's and 6100's.