It may be wishful thinking but my SG-3100 is running much better with lower CPU and RAM utilization across the board now that I'm using the -devel version.

Perfect! Thanks 🙂

@pfadmin said in Sync doubles virt. IP 10.10.10.1:

Hi,

I sync to 2nd pfsense in my lan so the pfdnsbl config is the same on the 2nd DNS. But the virtuell IP 10.10.10.1 is synced too so it ends with two 10.10.10.1 in my network. Am I wrong?

There is a "BETA" option in the pfBlockerNG-Devel 2.2.1 package to allow for HA setups.

In the DNSBL tab, there is an option called "VIP Address Type" which is defaulted to "IP Alias"... Since you have a HA setup, you could beta test the "carp" option which should fix this issue.... I have done limited testing with this option and as such is marked as "BETA"... but would appreciate any feedback.

I see 2.2.1 devel is now listed in my available packages. Running latest stable.

There is a Sync Tab that enable you to XMLRPC Sync to other hosts.
Another option is to copy/paste pfblockerNG settings from a config.xml to the other pfsense config.xml

@RonpfS thanks for the reply. I have the exact same NAT as yours, but still cannot browse the VIP.

@ar15usr said in No IP Alias/Group defined from Feed?:

Should I change them all?

No, those are normal when nothing is defined / configured for these entries.

Run a "Force Reload - DNSBL" and check the pfblockerng.log for more details.

@deividuska said in Site Blocking Using pfblocker DNSBL Unblock device:

@ronpfs

Hi
So what are my options in pfBlockerNG? DNSBL EasyList?

If I follow, you have one device that you do not want ad blocking on. If true, manually set the DNS on that device to the server you want. It will bypass DNSBL.

@r-oliveira

Guys I resolved this problem uninstalled the pfBlockerNG 2.1.2_3 , after that i installed the version pfBlockerNG-devel net 2.2.1 it worked for me

Run the following command:

And check to see if there is an empty <menu></menu> tag... I have seen this with another user, but am not sure if its a pfSense bug or a pfBlockerNG bug?

If there is an empty tag, you can edit /conf/config.xml and remove that empty tag. If you do that from pfSense > Edit File, that will reload the config after you press save and hopefully that fixes it.

Yes make a Permit Outbound Alias and add the IPs to the customlist and ensure that this Permit rule is above the other block rules.

@krischeu It might not generate alerts for that range if it is in a whitelist.

I had a spare mSata drive for my pfsense box...so I used that to upgrade and retained a full backup of the older version by swapping the drive... this issue is resolved in the newer version of pfsense

Not sure where you got the idea that pfblocker would be the correct tool for blocking users from accessing social media, and allowing others.

That would be better done with a proxy and categories..

Sure you can use the pfblocker dnsbl to block domains... But there is no drop down list that says this social media site, that one, this one.. Allow X but block Y, etc.

These different sites use many many IPs multiple domain names and different CDNs to host their content.. Do you have specific block lists already in mind that your wanting to use with pfblocker?

@bbcan17 I still cant acess 10.10.10.1 in my browser.

Cool, thanks..

(I added some overrides manually so thats why its on the list..)