DNSBLIP Blocking 1.1.1.1

nesense · Apr 11, 2018, 3:48 PM

DNSBLIP is blocking the DNS server 1.1.1.1, is there a way to prevent this? I tried whitelisting it under DNSBL but it's an IP address and not a domain name, also ran the commands:

grep "1.1.1.1" /var/db/pfblockerng/dnsbl/*
grep "1.1.1.1" /var/unbound/pfb_dnsbl.conf

but didn't get any results so I'm not sure how to find which block list is causing this.

chrcoluk · Apr 11, 2018, 5:03 PM

check the firewall logs.

Grimson · Apr 11, 2018, 5:15 PM

https://www.reddit.com/r/PFSENSE/comments/88wg6g/issue_with_pfblockerng_dnsbl_and_cloudflares_1111/

nesense · Apr 11, 2018, 5:35 PM

@Grimson:

https://www.reddit.com/r/PFSENSE/comments/88wg6g/issue_with_pfblockerng_dnsbl_and_cloudflares_1111/

Thanks! this worked

drewsaur · Apr 15, 2018, 9:32 PM

Why would it be that I am not seeing this issue, even though I have my "List Action" set to "Deny Both"?

khorton · Apr 18, 2018, 2:33 AM

For me, the Alerts tab in pfBlockerNG showed that 1.1.1.1 was blocked because it was on the Abuse_Zeus list. I had to add this IP to the Supress List by clicking on the "+" symbol in that row of the Alerts table. Then I had to disable and re-enable pfBlockerNG to get 1.1.1.1 to be unblocked.