Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    DNS Blacklist, New Package! Check it out.

    Scheduled Pinned Locked Moved pfSense Packages
    153 Posts 56 Posters 128.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      carboncopy
      last edited by

      Fist off I want to say this is a great package!  Thanks for all of your work!  Sorry if this has already been mentioned, but I would like to see GEO location block options.  So for example, if I wanted to block all traffic from URL's ending with *.RU or *.CN, etc.

      TNR

      1 Reply Last reply Reply Quote 0
      • B
        b0RG
        last edited by

        I would like very much to see this project continue on. Is it in the maybe stage still or will this project be further developed upon? All in all I want to say thank you for the work you have put into this. I've found it useful and would like to see it advanced further to become even better.

        1 Reply Last reply Reply Quote 0
        • X
          xa0z
          last edited by

          Hey guys… I'm really glad to hear all the good comments about this package.  As almost everyone knows, the issue with this package continuing is the Block List.  I would LOVE to make a new release, but until I can compile my OWN list, it just won't happen.  I have started on a list, but it's not very big and all of the categories are so large.

          As soon as I can get my OWN list compiled and separated then we will be back in business.  mcrane has been majorly swamped with his FusionPBX project so I've not even bothered him with this one.

          Just everyone who uses this Add-on, hold tight and don't give up on us.

          Next release features will include

          +Ability to add custom entries
          +Ability to bypass individual entries in a blocked category.
          +Ability to load local error page (on pfSense)
          +Ability to view/edit/modify categories within the GUI (memory intensive)

          1 Reply Last reply Reply Quote 0
          • S
            Supermule Banned
            last edited by

            Look forward to seeing that :)

            Remember to put an country IP blacklist as well….Many an admin would like to see China, Russia and Korea go away...:D

            1 Reply Last reply Reply Quote 0
            • R
              robfantini
              last edited by

              @sunil:

              Hi,
              I am new to PfSense, I tried using DNS Blacklist and tried to block, Adult Porn and Online Gaming but I beleive it blocks all sites, if I try accessing any site it redirects to Google. For eg I tried indiatimes.com; yahoo.co; rediff.com and our Company website but it all gets redirected to Google, not sure if I am going wrong somewhere or do I need to work on the scripts.

              I have the same issue.

              1 Reply Last reply Reply Quote 0
              • W
                wpcprez
                last edited by

                @robfantini:

                @sunil:

                Hi,
                I am new to PfSense, I tried using DNS Blacklist and tried to block, Adult Porn and Online Gaming but I beleive it blocks all sites, if I try accessing any site it redirects to Google. For eg I tried indiatimes.com; yahoo.co; rediff.com and our Company website but it all gets redirected to Google, not sure if I am going wrong somewhere or do I need to work on the scripts.

                I have the same issue.

                I also have the same issue and even if I uninstall the dns blacklist the DNS redirector is jacked up now and no dns redirection works.

                1 Reply Last reply Reply Quote 0
                • R
                  Roodawakening
                  last edited by

                  Am I missing something or is this like running Squid and Squidguard? And if so, why at the beginning of the thread did the developers make reference to DNS Blacklist (eventually) running in conjunction with a proxy server? Seems like DNS Blacklist is a great idea for those who don't employ proxy servers and redundant to those who do (along with Squidguard).

                  Please…show me the error in my thinking.

                  "The descent to hell is easy. The gates stand open day and night. But to reclimb the slope and escape to the upper air: This is labor."
                  –Virgil, Aeneid, Book 6

                  Rob

                  1 Reply Last reply Reply Quote 0
                  • R
                    running
                    last edited by

                    I agre, what is the difference with Squid-Squid guard
                    I have good squit guard setup should i consider this instead
                    What are the advantaged or disadvantages

                    Thank you!

                    1 Reply Last reply Reply Quote 0
                    • C
                      cybrsrfr
                      last edited by

                      The DNS Blacklist is what its name implies. Its a DNS Domain name black list. Domains that are on the list are detoured to an alternate address in this way it blocks the website. Simple concept effective and doesn't require a proxy. To be completely effective you need to block other DNS Servers.

                      1 Reply Last reply Reply Quote 0
                      • X
                        XIII
                        last edited by

                        did any one ask? Ive heard of pay services providing free services to projects like this.

                        -Chris Stutzman
                        Sys0:2.0.1: AMD Sempron 140 @2.7 1024M RAM 100GHD
                        Sys1:2.0.1: Intel P4 @2.66 1024M RAM 40GHD
                        freedns.afraid.org - Free DNS dynamic DNS subdomain and domain hosting.
                        Check out the pfSense Wiki

                        1 Reply Last reply Reply Quote 0
                        • B
                          BitSuck
                          last edited by

                          Hi,

                          is there a possibility that the DNS Blacklist is valid only for some clients in the network?
                          What i mean is: Can i set permissions within the DNS Blacklist for some clients.

                          And thank you for your work on this package!

                          1 Reply Last reply Reply Quote 0
                          • B
                            brutalhappy
                            last edited by

                            Wow… i've tried this.. unbelivble...it's simple. Thanksss Guys....it's really2 work .. \m/

                            1 Reply Last reply Reply Quote 0
                            • T
                              tebruno99
                              last edited by

                              This is a great package, using it very well great work!

                              I do have 1 issue.  When i turn on Adult option, it starts blocking sites that aren't even in the blacklist (specifically all of my personal domains).  limesg.com, and naveoss.com.  I did a grep in the blacklist directory and on the original sites blacklist files and my domains are not in any list.  Any advice?

                              1 Reply Last reply Reply Quote 0
                              • S
                                Supermule Banned
                                last edited by

                                Any news of this???

                                1 Reply Last reply Reply Quote 0
                                • D
                                  DigitalJer
                                  last edited by

                                  Just to chime in a bit:

                                  1. Great package.  Anything to help with granular site-blocking is a win to me.
                                  2. Wondering if perhaps the option to add this list http://www.mvps.org/winhelp2002/hosts.txt might be possible ?  …GREAT list to use if you're serious about ad-blocking.
                                  3. for anyone having trouble with the blacklist opening a page that you think should be blocked, you might have to clear your DNS cache - from the Windows command line:  ipconfig /flushdns

                                  –------------------------------------------------
                                  2.4.3-RELEASE (amd64)
                                  built on Mon Mar 26 18:02:04 CDT 2018
                                  FreeBSD 11.1-RELEASE-p7
                                  VM in ESXi 5.5
                                  1 x 1000baseTX (WAN)
                                  1 x 1000baseTX (LAN)

                                  1 Reply Last reply Reply Quote 0
                                  • C
                                    cybrsrfr
                                    last edited by

                                    DigitalJer the list you linked to seems to be free to use and I like the idea of an ad block category so I will add it as time permits. Main problem with granular control is some of these lists are very large so large we can't just display them in a textarea without killing the browser I've been thinking about a way to page through the list of domains.

                                    1 Reply Last reply Reply Quote 0
                                    • D
                                      DigitalJer
                                      last edited by

                                      @mcrane:

                                      … the list you linked to seems to be free to use and I like the idea of an ad block category so I will add it as time permits.

                                      Sweet! tyvm - looking forward to it :)

                                      –------------------------------------------------
                                      2.4.3-RELEASE (amd64)
                                      built on Mon Mar 26 18:02:04 CDT 2018
                                      FreeBSD 11.1-RELEASE-p7
                                      VM in ESXi 5.5
                                      1 x 1000baseTX (WAN)
                                      1 x 1000baseTX (LAN)

                                      1 Reply Last reply Reply Quote 0
                                      • T
                                        tommyboy180
                                        last edited by

                                        I really like the package. Thank you.

                                        -Tom Schaefer
                                        SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

                                        Please support pfBlocker | File Browser | Strikeback

                                        1 Reply Last reply Reply Quote 0
                                        • ?
                                          Guest
                                          last edited by

                                          @DigitalJer
                                          i've been using MVPS hosts file for years too :) i've installed pfsense yesterday and i'm trying new stuff currently :)  i just included the MVPS list (domains only) to the "/usr/local/www/packages/dnsblacklist/blacklists/ads/domains" file and it works fine.

                                          furthermore i've changed redirection to localhost/127.0.0.1 in dnsblacklist.php because i really don't like sending any information more than necessary to google :)

                                          is it also possible to use pfsense's /etc/hosts file for blocking those domains? i guess it wouldn't eat that much memory (correct me if i'm wrong) because dnsmasq simply looks up the /etc/hosts file and sees the localhost redirection entries and forwards that to the client instead of holding everything in memory (which is limited on my alix board).
                                          i'm new to pfsense and simple editing /etc/hosts didn't work because something always overwrites the file (i guess it is the "Register DHCP leases in DNS forwarder" setting).
                                          [edit]
                                          just found /etc/inc/system.inc and changed function system_hosts_generate() to append my host list to /etc/hosts :) skipping DNS blacklist package.
                                          [/edit]

                                          1 Reply Last reply Reply Quote 0
                                          • D
                                            DigitalJer
                                            last edited by

                                            @0x00:

                                            @DigitalJer
                                            i've been using MVPS hosts file for years too :)

                                            Yeah, it's maintained sooo well :)

                                            I take it you've been using it with a Linksys WRT or something?  Tomato / DD-WRT?  That's how I found it.

                                            @0x00:

                                            i've installed pfsense yesterday and i'm trying new stuff currently :)  i just included the MVPS list (domains only) to the "/usr/local/www/packages/dnsblacklist/blacklists/ads/domains" file and it works fine.

                                            …so you added it to pfsense manually, and it works?  I haven't had a chance to try it out yet :(

                                            –------------------------------------------------
                                            2.4.3-RELEASE (amd64)
                                            built on Mon Mar 26 18:02:04 CDT 2018
                                            FreeBSD 11.1-RELEASE-p7
                                            VM in ESXi 5.5
                                            1 x 1000baseTX (WAN)
                                            1 x 1000baseTX (LAN)

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.