Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    pfBlockerNG - Blocking a domain

    Scheduled Pinned Locked Moved General pfSense Questions
    11 Posts 4 Posters 1.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by

      Add a group in DNSBL > DNSBL_Groups.

      In the new group expand DNSBL Custom_List and add your domain(s) there.

      DNSBL_custom_list.png

      Steve

      D 1 Reply Last reply Reply Quote 2
      • D
        droidus @stephenw10
        last edited by

        @stephenw10 Thanks for the quick response. Here's what happens when I do that:

        fea236b6-ebde-426d-97f7-f971bfcc77b0-image.png

        ae9e165c-2484-4771-9dfa-4286e0cfcf45-image.png

        S 1 Reply Last reply Reply Quote 0
        • S
          SteveITS Galactic Empire @droidus
          last edited by

          @droidus I want to say I saw that…try setting the State to Off.

          Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
          When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
          Upvote 👍 helpful posts!

          S 1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Hmm, interesting. Been a while since I added that.

            You can always add custom values to an existing group.

            Bob.DigB 1 Reply Last reply Reply Quote 0
            • Bob.DigB
              Bob.Dig LAYER 8 @stephenw10
              last edited by

              @stephenw10 Btw. what is the "required format" for IP addresses?

              Capture.PNG

              1 Reply Last reply Reply Quote 1
              • S
                SteveITS Galactic Empire @SteveITS
                last edited by

                @SteveITS said in pfBlockerNG - Blocking a domain:

                try setting the State to Off

                I'm where I can test it now, yes it has to be Off.

                Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                Upvote 👍 helpful posts!

                1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  And the list still gets loaded as expected?

                  S 1 Reply Last reply Reply Quote 0
                  • S
                    SteveITS Galactic Empire @stephenw10
                    last edited by

                    @stephenw10 said in pfBlockerNG - Blocking a domain:

                    And the list still gets loaded as expected?

                    yes:

                    Non-authoritative answer:
                    Name:    assets.remerge.io
                    Address:  10.10.10.1
                    

                    I interpreted the State option there to only be for the "Source Definitions" section. Flipped back to you...does your log show an error it's trying to update the empty source? (presumably there is a reason the validation was added, but perhaps it just skips over blanks, so maybe this question is irrelevant)

                    @Bob-Dig Haven't tried that list entry...guessing one per line? :)

                    Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                    When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                    Upvote 👍 helpful posts!

                    Bob.DigB stephenw10S 2 Replies Last reply Reply Quote 1
                    • Bob.DigB
                      Bob.Dig LAYER 8 @SteveITS
                      last edited by Bob.Dig

                      @SteveITS said in pfBlockerNG - Blocking a domain:

                      @Bob-Dig Haven't tried that list entry...guessing one per line? :)

                      I think it is not, I couldn't make it work with more than one address, if I remember correct.

                      It is working, maybe it had problems with domain names?

                      Also working. 👍

                      1 Reply Last reply Reply Quote 1
                      • stephenw10S
                        stephenw10 Netgate Administrator @SteveITS
                        last edited by

                        @SteveITS said in pfBlockerNG - Blocking a domain:

                        does your log show an error it's trying to update the empty source?

                        No errors here when updating or reloading.

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.