1. Home
  2. pfSense Packages
  3. pfBlockerNG
Log in to post
Load new posts
  • BBcan177B

    pfBlockerNG-devel v3.0.0 - No longer bound by Unbound!

    Pinned
    94
    10 Votes
    94 Posts
    105k Views
    GertjanG
    @flepti said in pfBlockerNG-devel v3.0.0 - No longer bound by Unbound!: my setup too You mean you use pfSense 2.4.5 and "007" fBlockerNG-devel ? Easy solution : upgrade ?!
  • S

    Firewall Rules Order

    Pinned
    34
    0 Votes
    34 Posts
    27k Views
    V
    so happy to find the explanation relating the tables and lists!! thanks!
  • N

    Bypassing DNSBL for specific IPs

    Pinned
    114
    5 Votes
    114 Posts
    123k Views
    JonathanLeeJ
    @mcury thanks for the reply I will test this soon and yet you know how it works out.
  • ivorI

    Support pfBlockerNG development!

    Pinned
    5
    4 Votes
    5 Posts
    12k Views
    A
    I can not wait to see how he is going to do the mass import for IP4 and DNSBL, I hope its just a simple text doc you can just upload just like you would a backup file on Ublock extension. Looking forward to it. I may have to get some more Ram lol only got 8 gig and I bet doing mass list imports will hit the Ram hard. Great work hope it's coming along well ;) Great job.
  • W

    PfBlockerNG

    Pinned
    1k
    2 Votes
    1k Posts
    3m Views
    K
    @breeoge said in PfBlockerNG: @belt9: I wanted to chime in here as I just updated from a month old RC to 2.4.0-RELEASE last night and ran into this problem today. I haven't read through all of the many pages of the many threads that seem related to this issue (show how popular pfBNG is!), so maybe this has already been covered. But I've seen several people state that this doesn't happen on ZFS - I have a raidz2 ZFS install, and this happened to me, just throwing that out there. That is good to know. Thank you for the report.  BBcan177 is currently updating it to use SQLlite and this should fix any issues in the future.  In the other thread there is a temp fix posted.. https://create.vista.com/colors/palettes/ Thank you BreeOge Hello my friend. Many thanks to Bbcan177 for keeping the report up to date. as a result of this, in principle, the given problems are corrected.
  • N

    DNS Cache Flushed during Cron

    10
    0 Votes
    10 Posts
    345 Views
    N
    @Gertjan I disabled this to get live sync. [image: 1777933054786-2c053751-2894-49ad-9608-9e1515b352c4-image.png] I have not switched back to DNSBL python mode yet. Basically, you are saying the numbers from the command below are not accurate after cron and the cache is somewhere else? Sorry, just trying to understand how python mode works unbound-control -c /var/unbound/unbound.conf stats_noreset | grep total.num
  • D

    pfBlockerNG-devel is blocking traffic from an unmonitored NIC

    31
    0 Votes
    31 Posts
    999 Views
    D
    It works. Thank you all. Those who can read really have an advantage.
  • tinfoilmattT

    Successful -devel update to 3.2.14_1 on 2.8.1

    1
    1 Votes
    1 Posts
    87 Views
    No one has replied
  • J

    GUI alias and rule changes are not applied to the running PF ruleset ( pfctl -sr / pfctl -t unchanged), causing new firewall rules to not work, likely due to pfBlockerNG overriding tables.

    10
    0 Votes
    10 Posts
    281 Views
    SteveITSS
    @jacob.simon Just to add on, the issue isn't memory usage overall, it's "I ran out of slots to store things." (table entries) Also since you mentioned geo IP, if you "block the world" that creates much larger aliases than "allow my country." Long ago I'd read, if using pfBlocker, start table entries at 2 million and increase as necessary. YMMV
  • tinfoilmattT

    [PFB_FILTER - 17] Failed or invalid Mime Type: [application/octet-stream|0]

    26
    0 Votes
    26 Posts
    2k Views
    LaxarusL
    It appears that just adding "application/octet-stream" does not fix the issue unless I manually unzip the file. top-1m.csv should be present in the /var/db/pfblockerng Just updated to the devel v3.2.16 and this issue is still present. @BBcan177 any ideas for permanent fix?
  • S

    Enabling DNSBL in pfBlockerNG with logging turned on breaks DNS resolution

    14
    0 Votes
    14 Posts
    404 Views
    S
    @Gertjan I followed an earlier suggestion to reinstall with 'keep settings' disabled. Although I had tried that already, for some reason this time it worked. DNSBL is functioning correctly now.
  • W

    pfBlockerNG - The DNSBL VIP needs to be configured manually @ 2026-04-07 20:09:33

    6
    0 Votes
    6 Posts
    965 Views
    W
    @SteveITS Thanks to all I will try all your solutions. Update: error message has gone away.
  • C

    Upgrade to 3_2_14_1 causes pfb_dnsbl service to not start

    5
    1
    0 Votes
    5 Posts
    430 Views
    tinfoilmattT
    Several changes were made since November 2025 ('-devel' package version 3.2.12; see this GitHub commit) as a response to this bug report—which essentially eliminated automatic DNSBL VIP creation. One must now manually create the VIP and then manually 'assign' it to pfBlockerNG. This has caused a package upgrade issue where the DNSBL service will fail to start if configured with a nonexistent VIP. Since '-devel' package version 3.2.13_1, a warning is thrown during initial package install to account for this change, following this GitHub commit.
  • N

    pfblockerng_devel on 25.11.1 instability

    73
    1 Votes
    73 Posts
    5k Views
    stephenw10S
    The new version is available to all 26.03 installs now.
  • lohphatL

    Long boots after 22.01 update on SG-3100 with pfBlockerng

    Moved
    31
    0 Votes
    31 Posts
    6k Views
    stephenw10S
    Nice. Thanks for following up.
  • valnarV

    How to delete DNSBL feeds?

    3
    1
    0 Votes
    3 Posts
    183 Views
    valnarV
    @tinfoilmatt There it is! thanks
  • fireodoF

    Feeds from Threatview

    1
    2 Votes
    1 Posts
    116 Views
    No one has replied
  • publictoiletbowlP

    pfblocker 3.2.14 pf 25.11.1

    2
    5
    0 Votes
    2 Posts
    234 Views
    publictoiletbowlP
    hi there please ignore my previous port it running now i did reinstall and it works thanks
  • S

    pfblockerng lists add a lot of whitelist

    14
    0 Votes
    14 Posts
    1k Views
    B
    @Spider_VL that did it! thanks
  • T

    Deny all except a country

    25
    0 Votes
    25 Posts
    7k Views
    V
    @johnpoz Thank you, helped a lot !!!
Copyright 2026 Rubicon Communications LLC (Netgate). All rights reserved.