@bbcan17 said in DNSBL and PlayStation Vue issue - again:
manually add domain to the Whitelist
I really need hand-holding with this. I get the general concept, but where to "manually add domain to the Whitelist" and then to figure out (for example duappsdap.wshifen.com) an run 'drill' command, is not clear to me.
I hope it will be useful to many users.
Thx
I've not tried to read a file directly, but since the country aliases were created as URL aliases I copied that to create https://127.0.0.1:443/pfblockerng/pfblockerng.php?pfb=pfB_GeoIPUSv4. Can you try loading via URL? Our Asia alias for instance is https://127.0.0.1:443/pfblockerng/pfblockerng.php?pfb=pfB_Asia_v4 and I'm pretty sure I didn't create that one.
@ronpfs said in Alias Native Logging:
@morgion Can you use Adv. Inbound rules and use "Permit Inbound" and let it auto-create the rule which will have the 177 tracker id prefix?
Those rules do work, I have just been trying to not to create more aliases, and have more flexibility.
@ronpfs Oh, that is actually not a problem. I changed all the IPs in the config to 10.10.10.x for obfuscation. My LAN/VLANs all use the 10.100.0.0/16 range. So the VIP being on 10.10.10.1 isn't an issue.
@iyad:
Please i got this message and i can't find the issue
===[ IPv4 Process ]=================================================
[ forbid ] Downloading update .. completed ..
Empty file, Adding '1.1.1.1' to avoid download failure.
[ Badsites_custom ] Downloading update [ 05/14/18 12:52:00 ]connect: No route to host
connect: No route to host
connect: No route to host
. completed ..
[ pfB_Badsites Badsites_custom ] Custom List Error ]
In the IPv4/6 tab, click on the blue infoblock icons and you will see the correct format for adding URLs. It looks like the pfSense box can't connect to the URL you entered:
Local file: http(s)://127.0.0.1/filename or /var/db/pfblockerng/filename
For the customlist, you need to enter one IP per line (also click on blue infoblock icon for details)
In pfblockerNG General tab, disable pfBlockerNG and uncheck Keep Settings, save, this will clear all downloaded lists.
Then remove package pfBlockerNG.
Last add package pfBlockerNG, this should gave you a blank pfBlockerNG configuration.
Ok thanks. I got that to work.
But I guess I was looking for a way to bypass the firewall rules as well as DNSBL (i.e. I wanted a subnet on my LAN which would behave as though pfblockerng was not installed).
I found this post:
https://forum.pfsense.org/index.php?topic=119031.0
which seems to suggest that the only way around DNSBL is to push an entirely separate DNS entry for the hosts that will bypass DNSBL. The problem with this though is that these hosts will not be able to take advantage of DNS over TLS as implemented in pfsense.
Is there any other way to bypass DNSBL?
Okay so here is what I really need help with.
I want to block Outgoing packets to Russian and China with the exception of my torrents which I want to send through port 17000.
How would I implement this, as the "Invert" option does not appear for ports only for sources or destinations.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
