Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PfBlocker

    Scheduled Pinned Locked Moved pfSense Packages
    896 Posts 143 Posters 1.3m Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • marcellocM
      marcelloc
      last edited by

      1. I prefer to block inbound and outbound connections on all interfaces and use pfblocker aliases with 2 floating rules to do this.  Is this the preferred method or is there another way I am missing?

      Define action as alias only and create your rules. That's the best way.

      Treinamentos de Elite: http://sys-squad.com

      Help a community developer! ;D

      1 Reply Last reply Reply Quote 0
      • J
        justsomeguy6575
        last edited by

        This seems like a very good package. However I'm having trouble getting lists to work properly.

        I can make a list with this url in gz format and it works fine and creates an alias:
        http://list.iblocklist.com/?list=bt_spyware&fileformat=p2p&archiveformat=gz

        For some reason no matter what I try I can't get this list to load in either txt or gz format. No alias is created and nothing is blocked.
        https://zeustracker.abuse.ch/blocklist.php?download=ipblocklist

        Any ideas? Thanks

        1 Reply Last reply Reply Quote 0
        • marcellocM
          marcelloc
          last edited by

          For some reason no matter what I try I can't get this list to load in either txt or gz format. No alias is created and nothing is blocked.
          https://zeustracker.abuse.ch/blocklist.php?download=ipblocklist

          This list is in txt format and returns only ips, not CIDR or ip ranges.

          so,

          :)

          version 1.0.1 is out with:

          • fixed pfBlocker to check lists with single ips

          • updated country ip files

          • Return of Deny Both action(Inbound and Outbound)

          • Improved some GUI info

          Treinamentos de Elite: http://sys-squad.com

          Help a community developer! ;D

          1 Reply Last reply Reply Quote 0
          • J
            justsomeguy6575
            last edited by

            Wow.. thanks marcello! New version seems to work great.

            Nice work, thanks again

            1 Reply Last reply Reply Quote 0
            • V
              vg8open
              last edited by

              Thank you for a great package!  I just have one minor request for this package.  Can you add more granular options for the list update frequency?  Something like the attached image?

              Thanks,

              -Brian

              schedule.PNG
              schedule.PNG_thumb

              1 Reply Last reply Reply Quote 0
              • K
                KongGulerod
                last edited by

                Thanx for a great package - I like how it integrates and uses pfSense 2.0 firewall aliases and WAN/LAN rules :-)

                A small observation and fix request (latest pfSense 2.0 release + latest pfBlocker):

                After placing the pfBlocker widget on the bottom part of my long pfSense 2.0 dashboard page with vertical scrollbar, I observed that the dashboard page/scrollbar automatically reverted back to the top of the page at a fixed interval (every 5-10 secs).

                This is a bit annoying if I am looking at data from a widget in the bottom part of the dashboard page - and every 5-10 seconds the page jumps to the top (internal pfBlocker refresh?) and I have to manually use the scrollbar/mouse/arrow-keys to navigate back down to the bottom of the page.

                If I temp. removed the pfBlocker widget from dashboard the mis-behaviour went away also.

                Hope you can reproduce this scenario and look forward to next release :-)

                1 Reply Last reply Reply Quote 0
                • marcellocM
                  marcelloc
                  last edited by

                  I observed that the dashboard page/scrollbar automatically

                  Thanks for the feedback.

                  I`ve removed scroll call in widget.

                  reinstall package in about 15 minutes.

                  If you have many widgets, consider testing widescreen package. It may help you.

                  Treinamentos de Elite: http://sys-squad.com

                  Help a community developer! ;D

                  1 Reply Last reply Reply Quote 0
                  • AhnHELA
                    AhnHEL
                    last edited by

                    Reinstalled and now I'm not getting any CIDRs or Packets in the widget.

                    ![Screen Shot 2011-12-20 at 1.47.33 PM.png](/public/imported_attachments/1/Screen Shot 2011-12-20 at 1.47.33 PM.png)
                    ![Screen Shot 2011-12-20 at 1.47.33 PM.png_thumb](/public/imported_attachments/1/Screen Shot 2011-12-20 at 1.47.33 PM.png_thumb)

                    AhnHEL (Angel)

                    1 Reply Last reply Reply Quote 0
                    • marcellocM
                      marcelloc
                      last edited by

                      fixed javascript again, try reinstall in 15 minutes.

                      Treinamentos de Elite: http://sys-squad.com

                      Help a community developer! ;D

                      1 Reply Last reply Reply Quote 0
                      • L
                        LEPM
                        last edited by

                        pf 2.0 i386 + squid+squidguard+pfblocker 1.0 and 1.0.1 works very well (deny inbound)

                        pfblocker 1.0.1+ deny both, crash pfsense!!
                        reboot and crash,crash…
                        changing to deny inbound,works well again

                        Your new system is probably coming with some hyper trash like Windows 8

                        1 Reply Last reply Reply Quote 0
                        • marcellocM
                          marcelloc
                          last edited by

                          Can you be more specific on what kind of crash you have?

                          I'm using deny both with no issues or crashes.
                          Boot process is fine too.

                          Treinamentos de Elite: http://sys-squad.com

                          Help a community developer! ;D

                          1 Reply Last reply Reply Quote 0
                          • K
                            KongGulerod
                            last edited by

                            @marcelloc:

                            I`ve removed scroll call in widget.
                            reinstall package in about 15 minutes.

                            Seems to work fine now… no forced scrolling to the top when refreshing numbers.

                            Thanx !!

                            1 Reply Last reply Reply Quote 0
                            • AhnHELA
                              AhnHEL
                              last edited by

                              Getting this error now trying to enable pfBlocker, and the widget still looks like the pic i posted above.

                              Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 10499768 bytes) in /usr/local/pkg/pfblocker.inc on line 281

                              AhnHEL (Angel)

                              1 Reply Last reply Reply Quote 0
                              • RonpfSR
                                RonpfS
                                last edited by

                                Increase Firewall Maximum Table Entries under System: Advanced: Firewall and NAT
                                you may have to increase Firewall Maximum States at some point

                                2.4.5-RELEASE-p1 (amd64)
                                Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
                                Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

                                1 Reply Last reply Reply Quote 0
                                • RonpfSR
                                  RonpfS
                                  last edited by

                                  @marcelloc:

                                  fixed javascript again, try reinstall in 15 minutes.

                                  Reinstalled and now the Dashboard doesn't scroll anymoire  ;D
                                  Being at it  8) is-it possible to have the option to Enable pfBlocker by default on reinstall?

                                  2.4.5-RELEASE-p1 (amd64)
                                  Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
                                  Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

                                  1 Reply Last reply Reply Quote 0
                                  • AhnHELA
                                    AhnHEL
                                    last edited by

                                    @RonpfS:

                                    Increase Firewall Maximum Table Entries under System: Advanced: Firewall and NAT
                                    you may have to increase Firewall Maximum States at some point

                                    I'm already up to 2 million entries, even increasing to 200 million doesnt resolve issue.  Been using pfBlocker since it was first introduced and havent had an issue until now.

                                    Edit:

                                    Using the Top Spammers works fine, it has something to do with the iBlocks lists.  Using the same bunch of lists that I PM'd you back during this post.

                                    http://forum.pfsense.org/index.php/topic,42543.msg219723.html#msg219723

                                    AhnHEL (Angel)

                                    1 Reply Last reply Reply Quote 0
                                    • RonpfSR
                                      RonpfS
                                      last edited by

                                      I ran into that kind of issue when I played with the Level 1 at some point. I was using alias only.
                                      It looked like the table were locked by Firewall Rules, when I disabled pfblocker, the table would still showed up.
                                      I removed pfBlocker and the table were still there under Diagnostics: Tables!!!
                                      I install pfblocker and at some point I recovered. But I am not using Level 1 at this time.

                                      2.4.5-RELEASE-p1 (amd64)
                                      Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
                                      Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

                                      1 Reply Last reply Reply Quote 0
                                      • marcellocM
                                        marcelloc
                                        last edited by

                                        Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 10499768 bytes) in /usr/local/pkg/pfblocker.inc on line 281

                                        It looks like very large lists.

                                        Try to remove some lists and enable pfBlocker.

                                        Treinamentos de Elite: http://sys-squad.com

                                        Help a community developer! ;D

                                        1 Reply Last reply Reply Quote 0
                                        • M
                                          Metu69salemi
                                          last edited by

                                          @onhel:

                                          Getting this error now trying to enable pfBlocker, and the widget still looks like the pic i posted above.

                                          Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 10499768 bytes) in /usr/local/pkg/pfblocker.inc on line 281

                                          do you have 128GB harddisk? meaning 134217728 bytes divided with 1024 twice is exactly 128GB

                                          1 Reply Last reply Reply Quote 0
                                          • marcellocM
                                            marcelloc
                                            last edited by

                                            No, its 128mb RAM limit for php set on pfsense.

                                            Treinamentos de Elite: http://sys-squad.com

                                            Help a community developer! ;D

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.