Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    is something wrong with pfBlockerNG?

    Scheduled Pinned Locked Moved pfBlockerNG
    9 Posts 4 Posters 46 Views 3 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N Offline
      netboy
      last edited by netboy

      This has happened frequenty in the last 1 month - all of a sudden the domain name's in web browser does not resolve and get errror. When i "disable" pfBlockerNG everything is fine and dandy. It just happened again !

      S 1 Reply Last reply Reply Quote 0
      • S Offline
        SteveITS Galactic Empire @netboy
        last edited by

        @netboy next time, try just restarting unbound/DNS

        Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
        When upgrading, allow 10-15 minutes to reboot, or more depending on packages, CPU, and/or disk speed.
        Upvote 👍 helpful posts!

        N 1 Reply Last reply Reply Quote 0
        • N Offline
          netboy @SteveITS
          last edited by

          @SteveITS said in is something wrong with pfBlockerNG?:

          next time, try just restarting unbound/DNS

          I tried and this does not resolve the issue - IMHO pfBlockerNG is defintely broken - i have disabled it

          tinfoilmattT 1 Reply Last reply Reply Quote 0
          • tinfoilmattT Offline
            tinfoilmatt @netboy
            last edited by

            @netboy said in is something wrong with pfBlockerNG?:

            IMHO pfBlockerNG is defintely broken

            Can confirm this is nonsensical.

            N 1 Reply Last reply Reply Quote 0
            • N Offline
              netboy @tinfoilmatt
              last edited by

              @tinfoilmatt The proof: if i disable pfBlockerNG no issues this "clearly" confirms WITHOUT DOUBT it is broken

              tinfoilmattT N 2 Replies Last reply Reply Quote 0
              • tinfoilmattT Offline
                tinfoilmatt @netboy
                last edited by

                @netboy Well then it would seem that you've successfully resolved your root issue. Nice work.

                1 Reply Last reply Reply Quote 1
                • N Offline
                  netblues @netboy
                  last edited by

                  @netboy Pfblockerng is a complicated system with lots of configuration options, and a combination of those CAN break things, however in most cases its not pfblocker but the user.

                  Having said that, have you checked for any errors? Does php crash?
                  Does the update process complete succesfully?

                  N 1 Reply Last reply Reply Quote 0
                  • N Offline
                    netboy @netblues
                    last edited by netboy

                    @netblues My observations (logical) - pfBlockerNG was working perfectly fine "before" update pfsense to 25.07.1-RELEASE (arm64)- After the update i have made "zero" changes to pfBlockerNG - Based on this obervation, i logically conclude the update probably broke something that pfBlockerNG depended on? I maybe wrong but this is my cause and effect conclusions.Can others chime in? Do you have similar problems or observations?

                    N 1 Reply Last reply Reply Quote 0
                    • N Offline
                      netblues @netboy
                      last edited by netblues

                      @netboy Most probaly a configuration regression.

                      You really need to dig deeper.
                      From which pf version did you upgrade?
                      Have you tried removing and reinstalling pfblockerng?

                      Looking to the moon for craters with naked eye doesn't show the one that the crashed spaceship created.
                      Use a telescope instead. 👽

                      FWIW, I see quite a few pfblockerng instances on 25.07.1 running with no (apparent) issues τοο

                      1 Reply Last reply Reply Quote 0
                      • First post
                        Last post
                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.