a doubt about pfBlockerNG: maxmind db or lists mentioned in the official documentation? or both?
-
Dear Users,
I recently activated pfBlockerNG in order to block both the well-known dangerous IP addresses provided by MAXMIND DB both the custom IP addresses lists created by me.
Anyway, in the official documentation ( https://docs.netgate.com/pfsense/en/latest/packages/pfblocker.html ), I see that some "available lists" are mentioned:"Available lists
Spamhaus
DROP and EDROP.
http://www.spamhaus.org/drop/drop.txt
http://www.spamhaus.org/drop/edrop.txtDShield
Most Active Attacking IPs.
http://feeds.dshield.org/top10-2.txtiblocklist.com
A number of lists are available.
http://www.iblocklist.com/lists.php"What does it mean? Are these lists included in the MAXMIND provided lists or I have to add them manually to the pfBlockerNG configuration?
Are the MAXMIND lists enough ? What is your suggestion?Thank you in advance,
Mauro -
@mauro-tridici said in a doubt about pfBlockerNG: maxmind db or lists mentioned in the official documentation? or both?:
MAXMIND DB
MAXMIND DB is for geoIP, it does not contain any known dangerous IP addresses.
-
@mcury many thanks for your reply. I will add new dedicated lists
-
@mauro-tridici The pfBlocker doc page is rather out of date. Look on the Feeds tab.
-
@SteveITS thank you Steve :)