@RonpfS said in 2 Questions: Whitelist and UT1: @NollipfSense Your Whitlelist should have only domain names, no URLs or http:// That's what I have...see second post...WAIT, I see the mistake...thanks!

@BBcan177 Ah...that makes sense...I'll patiently wait for the updated d3pie.

@jeffvogelsang The pfBlockerNG-devel package has an existing Feeds tab. It would probably be more efficient to request changes to the feeds or submit a PR against the database here: https://github.com/pfsense/FreeBSD-ports/blob/devel/net/pfSense-pkg-pfBlockerNG-devel/files/usr/local/www/pfblockerng/pfblockerng_feeds.json Keep in mind that I typically do not add feeds that are compilations of other Original Feeds. Best to go directly to the source. There are changes to be made to the json already as some feeds are now discontinued. That will happen in the next release.

From your FW rule, it looks like there is no Firewall 'Auto' Rule Suffix' in the description. Your Firewall 'Auto' Rule Suffix is set to "AR" and that doesn't show in the Description of the FW Rule. I guess you changed that setting it at some point. Did you disable pfblockerNG when you changed the settings ? Select 'Auto Rule' description suffix for auto defined rules. pfBlockerNG must be disabled to modify suffix.

@NollipfSense Thanks for the suggestion of increasing states/table entries. I will give it a try. Although, as described in my initial post, my system seems to use a disproportionately low amount of memory about two hours after reload, it seems to apply TLD filtering adequately, as far as I can discern from looking at my Reports/Alerts/DNSBL log... Still puzzled... EDIT: Of course, I might not know about packets escaping filtering and thus logging, yet the log appears to be populated in a plausible manner.

Solved it guys, did some googling on that SSL error and found another post here: In /var/unbound Delete dnsbl_cert.pem unbound_control.key unbound_control.pem unbound_server.key unbound_server.pem Reboot and run force update/reload. DNSBL now up and running. Thanks for the help in diagnosing guys.

@jdeloach Funny that I turned off mine yet it still had the notification of failure! Just did a reload and that seems to resolve.

@cmeziere You're welcome and glad you fixed it.

@lbm_ said in pfblocker-devel does not block ip: I've created an alias under firewall rules There, you go...that's exactly what I would say.

@NollipfSense ... This very blind moron thanks you, sir! I don't know how I could have missed that expandable bar... Offending entry removed, license key entered, problem solved. Thank you again!

Yes, I understand completely (now that you explained) --- I did not realize that pfBlocker was working at DNS level - I assumed that it was putting IP blocks in firewall rules. Thanks again the help

Opened https://redmine.pfsense.org/issues/10252

Are you sure the disk space is being used by pfBlocker or is that just reporting the write error? Do you have Suricata installed by chance? https://forum.netgate.com/topic/140951/suricata-log-files-are-filling-the-disk https://forum.netgate.com/topic/130980/suricata-not-limiting-log-sizes-by-default

The logs ? @roney-s-mathews said in Installed pfBlockerNG but service does not start: I used multiple Ip's outside my network but the pi-hole page is not displayed pfSense / pfBlockerNG-dev is not pi-hole .... or please explain. Btw : The DNSBL part of pfBlockerNG-dev needs the resolver, not the forwarder. So it's nomal the DNSBL part doesn't start. [image: 1581348642920-f40122ad-5c96-47ef-bcd2-ff739129fe7a-image.png]

Hi, You you have the "TLD" option checked ? [image: 1581320004560-f6abe414-bbfa-456b-ab35-855a61407b80-image.png] If so, click on the blue "I" - right after the red text. So : uncheck TLD, or go out and buy really huge RAM sticks. Or remove some feeds.

@nopro You'll need to search as I remembered reading last year...maybe they use the same system resources since the function/feature they provide is similar so when one is using the resource the other is stranded.

@ZIMNYSBRAIN @NollipfSense No reason not to have Automatic Configuration Backup enabled. But still curious why pfB updated on its own...?

@BBcan177 Hello Sir, I'm having the same issue. I went i did what was said here twice and still have the problem. I also unchecked the boxes and rebooted the system, still nothing. could you help please? V/r