@pfsensetest Thank you. The format with the .*conf is correct.

@xentrk Thanks! You should also check out the DEVEL version.

@telecomguy you have to clear your browser and OS DNS cache between these events or wait for the TTL to expire.

I've not tried to read a file directly, but since the country aliases were created as URL aliases I copied that to create https://127.0.0.1:443/pfblockerng/pfblockerng.php?pfb=pfB_GeoIPUSv4. Can you try loading via URL? Our Asia alias for instance is https://127.0.0.1:443/pfblockerng/pfblockerng.php?pfb=pfB_Asia_v4 and I'm pretty sure I didn't create that one.

@ronpfs said in Alias Native Logging: @morgion Can you use Adv. Inbound rules and use "Permit Inbound" and let it auto-create the rule which will have the 177 tracker id prefix? Those rules do work, I have just been trying to not to create more aliases, and have more flexibility.

@ronpfs Oh, that is actually not a problem. I changed all the IPs in the config to 10.10.10.x for obfuscation. My LAN/VLANs all use the 10.100.0.0/16 range. So the VIP being on 10.10.10.1 isn't an issue.

@ronpfs I had it whitelisted EVERYWHERE!

I ran a reinstall and that seems to have fixed it

@iyad: Please i got this message and i can't find the issue ===[  IPv4 Process  ]================================================= [ forbid ] Downloading update  .. completed ..   Empty file, Adding '1.1.1.1' to avoid download failure. [ Badsites_custom ] Downloading update [ 05/14/18 12:52:00 ]connect: No route to host connect: No route to host connect: No route to host . completed .. [ pfB_Badsites Badsites_custom ] Custom List Error ] In the IPv4/6 tab, click on the blue infoblock icons and you will see the correct format for adding URLs. It looks like the pfSense box can't connect to the URL you entered: Local file:    http(s)://127.0.0.1/filename  or  /var/db/pfblockerng/filename For the customlist, you need to enter one IP per line (also click on blue infoblock icon for details)

In pfblockerNG General tab, disable pfBlockerNG and uncheck Keep Settings, save, this will clear all downloaded lists. Then remove package pfBlockerNG. Last add package pfBlockerNG, this should gave you a blank pfBlockerNG configuration.

Ok thanks. I got that to work. But I guess I was looking for a way to bypass the firewall rules as well as DNSBL (i.e. I wanted a subnet on my LAN which would behave as though pfblockerng was not installed). I found this post: https://forum.pfsense.org/index.php?topic=119031.0 which seems to suggest that the only way around DNSBL is to push an entirely separate DNS entry for the hosts that will bypass DNSBL. The problem with this though is that these hosts will not be able to take advantage of DNS over TLS as implemented in pfsense. Is there any other way to bypass DNSBL?

Thanks. That was it obviously

As pointed out to me in another post. https://forum.pfsense.org/index.php?topic=139634.0

I had missed that but am now a supporter. Thanks.

Okay so here is what I really need help with. I want to block Outgoing packets to Russian and China with the exception of my torrents which I want to send through port 17000. How would I implement this, as the "Invert" option does not appear for ports only for sources or destinations.

@jdeloach: @ARAMP1: Thanks.  It ended up being the "pfB_Top_v6 auto rule" on my LAN1.  I disabled it and now can access the website.  Now, to figure out what the rule did and what I did by disabling it.  :o The web site, raspberrypi.org, appears to reside in the country of Great Britain per Whois.com.  Are you blocking the country, Great Britain?  If so, unblock it in the block list, if pfB_Top_v6  list includes this country. United Kingdom is listed in Top 20 and Europe and I have them both unblocked.  :(