Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    REGEX blocking

    Scheduled Pinned Locked Moved pfBlockerNG
    48 Posts 8 Posters 9.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • U
      Uglybrian
      last edited by

      Yes Antibotic, its still working and I am still using the same list. so far so good.

      1 Reply Last reply Reply Quote 0
      • GertjanG
        Gertjan @Antibiotic
        last edited by

        @Antibiotic

        yes :

        0795fca1-4275-4cd0-b6b8-7e0cb66bdf99-image.png

        It's pretty powerful.
        Be aware : regex !

        Read it like this : if any of the text in the lines (the requested host name) matches the regex list, the request gets blocked.

        No "help me" PM's please. Use the forum, the community will thank you.
        Edit : and where are the logs ??

        A 1 Reply Last reply Reply Quote 0
        • A
          Antibiotic @Gertjan
          last edited by

          @Gertjan Can you please post your regex in text format? I will copy

          pfSense plus 24.11 on Topton mini PC
          CPU: Intel N100
          NIC: Intel i-226v 4 pcs
          RAM : 16 GB DDR5
          Disk: 128 GB NVMe
          Brgds, Archi

          GertjanG 1 Reply Last reply Reply Quote 0
          • GertjanG
            Gertjan @Antibiotic
            last edited by

            @Antibiotic

            ^(.+[_.-])?adse?rv(er?|ice)?s?[0-9]*[_.-] #test RGX1
            ^(.+[_.-])?telemetry[_.-] #test RGX2
            ^adim(age|g)s?[0-9]*[_.-] #test RGX4
            ^adtrack(er|ing)?[0-9]*[_.-] #test RGX5
            ^advert(s|is(ing|ements?))?[0-9]*[_.-] #test RGX6
            ^aff(iliat(es?|ion))?[_.-] #test RGX7
            ^analytics?[_.-] #test RGX8
            ^banners?[_.-] #test RGX9
            ^beacons?[0-9]*[_.-] #test RGX10
            ^count(ers?)?[0-9]*[_.-] #test RGX11
            ^pixels?[-.] #test RGX12
            ^stat(s|istics)?[0-9]*[_.-] #test RGX13
            ^stat(s|istics)?[0-9]*[_.-] #test RGX14
            

            No "help me" PM's please. Use the forum, the community will thank you.
            Edit : and where are the logs ??

            A LarryFahnoeL 3 Replies Last reply Reply Quote 0
            • A
              Antibiotic @Gertjan
              last edited by

              @Gertjan Thank you

              pfSense plus 24.11 on Topton mini PC
              CPU: Intel N100
              NIC: Intel i-226v 4 pcs
              RAM : 16 GB DDR5
              Disk: 128 GB NVMe
              Brgds, Archi

              GertjanG 1 Reply Last reply Reply Quote 0
              • GertjanG
                Gertjan @Antibiotic
                last edited by

                @Antibiotic

                Keep an eye on it :

                57cb2bd3-ae9e-4a48-809b-42b97b12c284-image.png

                33306f66-7def-442a-a910-cbe6ffcf37da-image.png

                No "help me" PM's please. Use the forum, the community will thank you.
                Edit : and where are the logs ??

                A 1 Reply Last reply Reply Quote 0
                • A
                  Antibiotic @Gertjan
                  last edited by

                  @Gertjan Are you block for incoming?
                  What the reason, firewall block itself all in?

                  pfSense plus 24.11 on Topton mini PC
                  CPU: Intel N100
                  NIC: Intel i-226v 4 pcs
                  RAM : 16 GB DDR5
                  Disk: 128 GB NVMe
                  Brgds, Archi

                  GertjanG 1 Reply Last reply Reply Quote 0
                  • GertjanG
                    Gertjan @Antibiotic
                    last edited by

                    @Antibiotic said in REGEX blocking:

                    Are you block for incoming?

                    My LANs of course.

                    5ab0902a-71b5-4617-a070-07545a8825e7-image.png

                    That's where the original DNS requests come from, and I want to 'disable' some of them like "incoming.telemetry.mozilla.org" (probably from my browser).
                    I don't know what beacons.gtv2.com is, the request came from my captive portal.

                    @Antibiotic said in REGEX blocking:

                    What the reason, firewall block itself all in?

                    The regex has nothing to with the/a firewall.
                    A DNS request came in "what is the A of incoming.telemetry.mozilla.org ?"
                    The regex filter found it, so pfBlockerng told unbound to tell the LAN client : it's 0.0.0.0.
                    When the LAN clients receives 0.0.0.0 it can't connect to "incoming.telemetry.mozilla.org" because it has no valid IP to connect to.
                    This is how DNSBL works.

                    I don't need (want) a firewall that blocks "Internet" IPs. My LAN firewall is wide open - the portal a bit less, though.

                    No "help me" PM's please. Use the forum, the community will thank you.
                    Edit : and where are the logs ??

                    A 1 Reply Last reply Reply Quote 0
                    • A
                      Antibiotic @Gertjan
                      last edited by

                      @Gertjan are you using firefox?

                      pfSense plus 24.11 on Topton mini PC
                      CPU: Intel N100
                      NIC: Intel i-226v 4 pcs
                      RAM : 16 GB DDR5
                      Disk: 128 GB NVMe
                      Brgds, Archi

                      GertjanG 1 Reply Last reply Reply Quote 0
                      • GertjanG
                        Gertjan @Antibiotic
                        last edited by

                        @Antibiotic

                        The better part of my live, and for the moment, yeah....

                        No "help me" PM's please. Use the forum, the community will thank you.
                        Edit : and where are the logs ??

                        A 1 Reply Last reply Reply Quote 0
                        • A
                          Antibiotic @Gertjan
                          last edited by Antibiotic

                          @Gertjan Idk, which platform you are using for firefox, linux or freebsd, but under windows firefox is disaster

                          pfSense plus 24.11 on Topton mini PC
                          CPU: Intel N100
                          NIC: Intel i-226v 4 pcs
                          RAM : 16 GB DDR5
                          Disk: 128 GB NVMe
                          Brgds, Archi

                          GertjanG 1 Reply Last reply Reply Quote 0
                          • GertjanG
                            Gertjan @Antibiotic
                            last edited by

                            @Antibiotic said in REGEX blocking:

                            but under windows firefox is disaster

                            Works fine for me, I only have Microsoft GUIs here.
                            Other OSs here have no GUI, only command line acces, and lynx if needed.

                            No "help me" PM's please. Use the forum, the community will thank you.
                            Edit : and where are the logs ??

                            A 1 Reply Last reply Reply Quote 0
                            • A
                              Antibiotic @Gertjan
                              last edited by Antibiotic

                              @Gertjan Oki))I tried a few times , but on my laptop firefox tabs are a huge, actually all a huge . Do not like it at all and native edge better integrate to windows security options.

                              pfSense plus 24.11 on Topton mini PC
                              CPU: Intel N100
                              NIC: Intel i-226v 4 pcs
                              RAM : 16 GB DDR5
                              Disk: 128 GB NVMe
                              Brgds, Archi

                              GertjanG 1 Reply Last reply Reply Quote 0
                              • GertjanG
                                Gertjan @Antibiotic
                                last edited by

                                @Antibiotic
                                I have huge screens ^^

                                No "help me" PM's please. Use the forum, the community will thank you.
                                Edit : and where are the logs ??

                                A 1 Reply Last reply Reply Quote 0
                                • A
                                  Antibiotic @Gertjan
                                  last edited by

                                  @Gertjan What kind of dimension?

                                  pfSense plus 24.11 on Topton mini PC
                                  CPU: Intel N100
                                  NIC: Intel i-226v 4 pcs
                                  RAM : 16 GB DDR5
                                  Disk: 128 GB NVMe
                                  Brgds, Archi

                                  GertjanG 1 Reply Last reply Reply Quote 0
                                  • GertjanG
                                    Gertjan @Antibiotic
                                    last edited by

                                    @Antibiotic 72 cm diagonal

                                    No "help me" PM's please. Use the forum, the community will thank you.
                                    Edit : and where are the logs ??

                                    A 1 Reply Last reply Reply Quote 0
                                    • A
                                      Antibiotic @Gertjan
                                      last edited by

                                      @Gertjan Is it not a PC screen right? It is TV screen

                                      pfSense plus 24.11 on Topton mini PC
                                      CPU: Intel N100
                                      NIC: Intel i-226v 4 pcs
                                      RAM : 16 GB DDR5
                                      Disk: 128 GB NVMe
                                      Brgds, Archi

                                      1 Reply Last reply Reply Quote 0
                                      • LarryFahnoeL
                                        LarryFahnoe @Gertjan
                                        last edited by

                                        @Gertjan said in REGEX blocking:

                                        ^stat(s|istics)?[0-9][_.-] #test RGX13
                                        ^stat(s|istics)?[0-9]
                                        [_.-] #test RGX14

                                        While I am conversant with regular expressions, I am puzzled by what appears to be duplicate tests?

                                        --Larry

                                        A 1 Reply Last reply Reply Quote 0
                                        • A
                                          Antibiotic @LarryFahnoe
                                          last edited by

                                          @LarryFahnoe I have the same question))) Is it type error?

                                          pfSense plus 24.11 on Topton mini PC
                                          CPU: Intel N100
                                          NIC: Intel i-226v 4 pcs
                                          RAM : 16 GB DDR5
                                          Disk: 128 GB NVMe
                                          Brgds, Archi

                                          1 Reply Last reply Reply Quote 0
                                          • A
                                            Antibiotic @Gertjan
                                            last edited by Antibiotic

                                            @Gertjan I did a liitle bit different)))

                                            New Text Document.txt

                                            pfSense plus 24.11 on Topton mini PC
                                            CPU: Intel N100
                                            NIC: Intel i-226v 4 pcs
                                            RAM : 16 GB DDR5
                                            Disk: 128 GB NVMe
                                            Brgds, Archi

                                            1 Reply Last reply Reply Quote 0
                                            • GertjanG Gertjan referenced this topic on
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.