pfBlockerNG - Blocking a domain

[droidus]

I am looking at blocking a domain. How can I do so with pfBlockerNG? I am in the Feeds tab, but I don't see any custom entries field. I am running pfBlockerNG-devel 3.2.0_4 on pfsense 2.6.0.

[stephenw10]

Add a group in DNSBL > DNSBL_Groups.

In the new group expand DNSBL Custom_List and add your domain(s) there.

Steve

[droidus]

@stephenw10 Thanks for the quick response. Here's what happens when I do that:

[SteveITS]

@droidus I want to say I saw that…try setting the State to Off.

[stephenw10]

Hmm, interesting. Been a while since I added that.

You can always add custom values to an existing group.

[Bob.Dig]

@stephenw10 Btw. what is the "required format" for IP addresses?

[SteveITS]

@SteveITS said in pfBlockerNG - Blocking a domain:

try setting the State to Off

I'm where I can test it now, yes it has to be Off.

[stephenw10]

And the list still gets loaded as expected?

[SteveITS]

@stephenw10 said in pfBlockerNG - Blocking a domain:

And the list still gets loaded as expected?

yes:

Non-authoritative answer:
Name:    assets.remerge.io
Address:  10.10.10.1

I interpreted the State option there to only be for the "Source Definitions" section. Flipped back to you...does your log show an error it's trying to update the empty source? (presumably there is a reason the validation was added, but perhaps it just skips over blanks, so maybe this question is irrelevant)

@Bob-Dig Haven't tried that list entry...guessing one per line? :)

[Bob.Dig]

@SteveITS said in pfBlockerNG - Blocking a domain:

@Bob-Dig Haven't tried that list entry...guessing one per line? :)

I think it is not, I couldn't make it work with more than one address, if I remember correct.

It is working, maybe it had problems with domain names?

Also working.

[stephenw10]

@SteveITS said in pfBlockerNG - Blocking a domain:

does your log show an error it's trying to update the empty source?

No errors here when updating or reloading.