Well you have probably too many URLs. Do you really need all the EasyList language ? Also you are using some tables that haven't changed since 2014 : May 20 2014 Malekal_Hosts Review the logs file to detect issues.

mac-pro:~ andy$ whois -h whois.radb.net -- '-i origin AS43203' route: 185.175.11.0/24 origin: AS43203 mnt-by: rsaf-mnt mnt-by: mcnetcz-mnt created: 2018-03-01T18:41:08Z last-modified: 2018-03-01T19:39:13Z source: RIPE notify: roman@paskov.cz remarks: **************************** remarks: * THIS OBJECT IS MODIFIED remarks: * Please note that all data that is generally regarded as personal remarks: * data has been removed from this object. remarks: * To view the original object, please query the RIPE Database at: remarks: * http://www.ripe.net/whois remarks: ****************************

Thank you sir BBcan117 it works! God bless

@mamatequiero123 said in BlackList para blockear Proxys anonimous con pfblockerNG: BlackList para blockear Proxys anonimous con pfblockerNG I don't have any experience with these feeds for Proxy blocking... But there are some here (Search for "proxy"): https://github.com/firehol/blocklist-ipsets This is one example. Also make sure that you click "RAW" and use those URLs for the Source URL in pfBlockerNG. https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/proxylists.ipset

Then I'm thanking you again for your kind efforts

https://forum.netgate.com/search?term=https%20cert%20error&in=posts&matchWords=all&categories[]=62&sortBy=timestamp&sortDirection=desc&showAs=posts next time use the search option yourself.

Thank you very much appreciate. I will use the devel version.

@freebs Maybe save DNS Resolver settings then Apply settings would do the trick.

No worries, I’ll figure it out.

I personally switched from Snort to Suricata for reasons mentioned here. https://forum.netgate.com/topic/141946/to-snort-or-not-pfblocker/4 I didn't notice much difference in the GUI, configuration, or functionality aspect between the two. In terms of tuning rules, they seemed pretty much the same to me as well. In my opinion, once I figured out Snort the learning curve was not high for Suricata.

@Web2Print said in WAN says connected but no Internet on Lan - pfBlockerNG seems to be the issue.: Cannot allocate memory https://forum.netgate.com/topic/129748/cannot-define-table-bogonsv6-cannot-allocate-memory

Good Idea I should have thought of that. ill try get some soon.

Installed just now. No problems so far. Thanks for all the awesome work you do BBcan177!

I'm happy to assist, mushtash, though you're right, I'm currently running the prod version: 2.1.4_16 Anyone else here using the dev version who might know the answer to this question?

Might be worth reviewing the responses to my earlier post here in which the circumstances were possibly similar ...

Just a quick follow up to my post to advise that my "problem" has not reoccurred since taking RonpfS advice to reduce the number of entries in my pfblockerNG block files. Once again my thanks to all who took the trouble to respond. Cheers

@bbcan177 said in No Internet connection on LAN interfaces after reboot: pfSense Resolver Log Level Wheres that under mate ?

Definitely inspect the content--you will probably find a URL which is not blocked being used there. Sometimes you may be getting ads from a subdomain, so you may need to check the "Enable TLD" to attempt to deal with these subdomains. Also, so sites host ads locally, but that is less common. A content inspection should tell you.