[❌] /opt/local/etc/macos-fortress/block.txt.asc DOESN'T EXIST!

[mariano-daniel]

OS: MacOS Monterey 12.7.3
port version
Version: 2.12.4

% sudo macosfortress_setup_check.sh
Checking macOS-Fortress installed items (run as sudo)…

Checking launchd.plist files…
[✅] /Library/LaunchDaemons/org.macports.macos-fortress.plist exists
[✅] /Library/LaunchDaemons/org.macports.macos-fortress-pf.plist exists
[✅] /Library/LaunchDaemons/org.macports.macos-fortress-pf.brutexpire.plist exists
[✅] /Library/LaunchDaemons/org.macports.macos-fortress-pf.subports.plist exists
[✅] /Library/LaunchDaemons/org.macports.macos-fortress-dshield.plist exists
[✅] /Library/LaunchDaemons/org.macports.macos-fortress-emergingthreats.plist exists
[✅] /Library/LaunchDaemons/org.macports.macos-fortress-proxy.plist exists
[✅] /Library/LaunchDaemons/org.macports.macos-fortress-hosts.plist exists
[✅] /Library/LaunchDaemons/org.macports.adblock2privoxy.plist exists
[✅] /Library/LaunchDaemons/org.macports.adblock2privoxy-nginx.plist exists
[✅] /Library/LaunchDaemons/org.macports.Privoxy.plist exists

Checking launchd.plist's. These should all be installed with return
code 0 (2d column of sudo launchctl list)…
[✅] - 0 org.macports.macos-fortress-emergingthreats
[✅] - 0 org.macports.Privoxy.delete-expired-certs
[✅] 30161 0 org.macports.macos-fortress-pf
[✅] 30154 0 org.macports.macos-fortress
[✅] - 0 org.macports.macos-fortress-hosts
[✅] - 0 org.macports.macos-fortress-pf.brutexpire
[✅] - 0 org.macports.macos-fortress-dshield
[✅] 30266 0 org.macports.adblock2privoxy
[✅] 30172 0 org.macports.macos-fortress-proxy
[✅] 30269 0 org.macports.adblock2privoxy-nginx
[✅] 30262 0 org.macports.Privoxy
[✅] 30165 0 org.macports.macos-fortress-pf.subports

Checking PF files…
[✅] /opt/local/etc/macos-fortress/pf.conf exists
[✅] /opt/local/etc/macos-fortress/blockips.conf exists
[✅] /opt/local/etc/macos-fortress/emerging-Block-IPs.txt exists
[✅] /opt/local/etc/macos-fortress/compromised-ips.txt exists
[✅] /opt/local/etc/macos-fortress/dshield_block_ip.txt exists
[✅] /opt/local/etc/macos-fortress/block.txt exists
[❌] /opt/local/etc/macos-fortress/block.txt.asc DOESN'T EXIST!

Checking PF…
No ALTQ support in kernel
ALTQ related functions disabled
[❌] PF isn't enabled! Troubleshooting:

sudo pfctl -si
less /opt/local/var/log/macos-fortress.log
sudo /opt/local/bin/gpg --homedir /var/root/.gnupg --list-keys | grep -A2 -B1 -i dshield.org
sudo pfctl -Fall && sudo pfctl -ef /opt/local/etc/macos-fortress/pf.conf

Checking hosts files…
[✅] /opt/local/etc/macos-fortress/macos-fortress-hosts exists
[✅] /opt/local/etc/macos-fortress/whitelist.txt exists
[✅] /opt/local/etc/macos-fortress/blacklist.txt exists

Checking /opt/local/etc/macos-fortress/macos-fortress-hosts creation…
[✅] /opt/local/etc/macos-fortress/macos-fortress-hosts exists

Checking proxy PAC and proxy chain files…
[❌] /Library/WebServer/Documents/proxy.pac.orig DOESN'T EXIST!
[✅] /Library/WebServer/Documents/proxy.pac exists
[✅] /opt/local/bin/adblock2privoxy exists
[✅] /opt/local/etc/macos-fortress/proxy.pac exists
[✅] /opt/local/etc/adblock2privoxy/nginx.conf exists
[✅] /opt/local/etc/adblock2privoxy/css/default.html exists
[✅] /opt/local/etc/macos-fortress/macos-fortress-hosts.action exists
[✅] /opt/local/etc/adblock2privoxy/privoxy/ab2p.action exists
[✅] /opt/local/etc/adblock2privoxy/privoxy/ab2p.filter exists
[✅] /opt/local/etc/adblock2privoxy/privoxy/ab2p.system.action exists
[✅] /opt/local/etc/adblock2privoxy/privoxy/ab2p.system.filter exists
[✅] /opt/local/etc/privoxy/config exists
[✅] /opt/local/var/log/privoxy/logfile exists

Checking proxy status…
[✅] Privoxy is running properly
[❌] Privoxy config http://p.p/ via http://localhost:8118 isn't running properly! Troubleshooting:

sudo less /opt/local/var/log/privoxy/logfile
sudo port reload privoxy
[❌] nginx isn't running properly! Troubleshooting:

sudo ps -f cat /opt/local/var/run/nginx/nginx-adblock2privoxy.pid
sudo port reload org.macports.adblock2privoxy-nginx
[✅] PAC /Library/WebServer/Documents/proxy.pac passes Javascript parsing
[✅] Web server for http://localhost/proxy.pac is running properly
[❌] Blackhole server for https://localhost:8119/ isn't running properly! Troubleshooting:

sudo ps -f cat /opt/local/var/run/nginx/nginx-adblock2privoxy.pid
sudo port reload org.macports.adblock2privoxy

---

[essandess]

Thanks! Taking these one at a time:

pf:

block.txt.asc isn’t used because we get block.txt via TLS, and IIRC the gpg sig wasn’t always available, so that’s an issue with the script that I’ll correct.

https://github.com/macports/macports-ports/blob/e33645db8f41a66060fa238c9d1b49b1496b05e1/net/macos-fortress/Portfile#L471

But that doesn’t affect pf. Do you know why pf isn’t running? Have you tried the troubleshooting suggestions?

Privoxy proxy:

It’s running, but are you using it either in your network or browser proxy settings? If not, the script will throw an error.

Adblock2Privoxy:

The nginx reverse proxy server isn’t running. Have you set up your own PKI? The default PKI is a stand in and unless you create your own valid certs it’ll expire in days. There’s instructions in the port how to do that, but this repo automated the process:

https://github.com/essandess/PKI-Structure