yep that is the option I was looking for, many thanks!!!!

Without knowing more about what you're trying to do the following configuration should create a rule similar to the screenshot you posted. Replace "Alias for your 10.40.2.56 IP" with an alias you created that contains that IP and select the appropriate gateway at the bottom. Protocol can't be "any" for advanced rules but "TCP/UDP" is the best you can do. This rule will allow all TCP/UDP traffic from 10.40.2.56 to get to the gateway but it cannot force all traffic from 10.40.2.56 to go through the gateway. That would require a routing rule, not a firewall rule (outside the scope of pfBlockerNG). [image: 1557058218779-ipv4rule.jpg]

Alright, I was finally able to make the -devel package work, by reinstalling pfSense from scratch. Glad to see the IPv6 rules are now working properly! Thank you for your help.

Install pfBlockerNG-devel

@guardian said in IP Blocking - Is this a bug?: Thanks for the reply @BBcan177. So is this a bug? I can understand a list changing, and that's no problem -- am I correct that the list name is not logged when the event occurs? Am I correct then that it's just a matter of report not being able to show which list the IP address is in because the list has changed? When you refresh the Alerts tab in pfBlockerNG, it checks to see if the IP is still listed in the /var/db/pfblockerng/deny/ folder. If it doesn't find the IP, it will report as "No Match". What gets added/removed in the Feed (URL) is not managed by the package. IPs are being added/removed all the time by the Feed Maintainers.

@genghiskern Can you try this: https://www.reddit.com/r/PFSENSE/comments/b5qpm5/unbound_resolver_error_cant_assign_requested/ejgkuyz/?context=3

pfBlockerNG-devel is the version presently deployed.

@NogBadTheBad said in pfBlockerNG ipv4 not blocking ebay but is blocking twitter: Yup it relies on DNS pointing to your pfSense box and returns a local IP address :(

Thus far I can either break internet for the OpenVPN client, or still let ads through. I'm pretty sure this can be done, I'm simply not technically proficient enough to do this alone. :(

@BBcan177 thank you very much for looking at this. I will implement the patched file and report back if the error recurs. I'll also respond in 3-4 weeks if there is still no issue.

@cjbujold said in How to replace Gif with a message for users: Is it possible to replace the 1x1 gif with a message that tells a user why they are getting a blank page. We are using PfblockerNG version 2.2.5.22 pfBlockerNG-devel already has a blocked web page for DNSBL. You wouldn't want the users to see any Blocked page for the 1x1 pixel as that would cause the blocked web page to be seen where all of the ADverts were blocked. You can however, modify the image to something small: https://www.reddit.com/r/pfBlockerNG/comments/b5gf5y/dnsbl_1px_gif_location/

Well you have probably too many URLs. Do you really need all the EasyList language ? Also you are using some tables that haven't changed since 2014 : May 20 2014 Malekal_Hosts Review the logs file to detect issues.

mac-pro:~ andy$ whois -h whois.radb.net -- '-i origin AS43203' route: 185.175.11.0/24 origin: AS43203 mnt-by: rsaf-mnt mnt-by: mcnetcz-mnt created: 2018-03-01T18:41:08Z last-modified: 2018-03-01T19:39:13Z source: RIPE notify: roman@paskov.cz remarks: **************************** remarks: * THIS OBJECT IS MODIFIED remarks: * Please note that all data that is generally regarded as personal remarks: * data has been removed from this object. remarks: * To view the original object, please query the RIPE Database at: remarks: * http://www.ripe.net/whois remarks: ****************************

Thank you sir BBcan117 it works! God bless

@mamatequiero123 said in BlackList para blockear Proxys anonimous con pfblockerNG: BlackList para blockear Proxys anonimous con pfblockerNG I don't have any experience with these feeds for Proxy blocking... But there are some here (Search for "proxy"): https://github.com/firehol/blocklist-ipsets This is one example. Also make sure that you click "RAW" and use those URLs for the Source URL in pfBlockerNG. https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/proxylists.ipset