Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PfBlocker

    Scheduled Pinned Locked Moved pfSense Packages
    896 Posts 143 Posters 1.3m Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      Cino
      last edited by

      I think I may have found a small bug with the package… I haven't re-read all 22 pages but did some searching within the topic and couldn't find it.

      I'm using squid to improve web performance and for logging.. I have setup a couple of list within pfBlocker to block inbound(WAN) and outbound(LAN) Since squid uses localhost, i figured it would need to be a floating rule for it to catch. After reading a few post, but hunch was right..

      After creating the floating rules, they seem to work.. But anytime I make a change within the pfBlocker config pages or just re-save, it deleted the floating rules. I'm thinking this is because pfBlocker deletes and re-creates the Alias's when the configuration its save..

      I tried to create a new alias and nest the pfBlockers alias's into it but pfSense didn't like that.. I thought about creating brand new url table alias but then that would be a waste of memory.

      any thoughts?

      1 Reply Last reply Reply Quote 0
      • marcellocM
        marcelloc
        last edited by

        What description did you configured on floating rule?

        If it was pfBlockeraliasname something rule, then pfBlocker will remove it.

        Try 'pfBlockeraliasname for squid' and see if it survive an apply

        Treinamentos de Elite: http://sys-squad.com

        Help a community developer! ;D

        1 Reply Last reply Reply Quote 0
        • C
          Cino
          last edited by

          I tried that and it didn't work, but "pfBlocker-aliasname for Squid"  does.. The '-' made the difference.. As always, thank you!!

          1 Reply Last reply Reply Quote 0
          • T
            taryezveb
            last edited by

            @Cino:

            I'm using squid to improve web performance and for logging.. I have setup a couple of list within pfBlocker to block inbound(WAN) and outbound(LAN) Since squid uses localhost, i figured it would need to be a floating rule for it to catch. After reading a few post, but hunch was right..

            Can you please explain. Does this mean if one is using Squid and pfBlocker. A floating rule for Squid is need in order for Squid to use the lists used in pfBlocker?

            1 Reply Last reply Reply Quote 0
            • marcellocM
              marcelloc
              last edited by

              @taryezveb:

              Can you please explain. Does this mean if one is using Squid and pfBlocker. A floating rule for Squid is need in order for Squid to use the lists used in pfBlocker?

              Yes, read this topic.

              http://forum.pfsense.org/index.php/topic,44479.0.html

              Treinamentos de Elite: http://sys-squad.com

              Help a community developer! ;D

              1 Reply Last reply Reply Quote 0
              • T
                taryezveb
                last edited by

                @marcelloc:

                Yes, read this topic.

                http://forum.pfsense.org/index.php/topic,44479.0.html

                Thanks, just read it but do not fully understand. Maybe once I add the floating rule(s), I will.

                1 Reply Last reply Reply Quote 0
                • marcellocM
                  marcelloc
                  last edited by

                  pfSense is a statefull firewall, so all rules are applied where connections begin.

                  Squid does not use LAN or WAN rules but localhost rules as it starts communications to web servers locally.

                  The only way to apply rules on localhost, is using floating rules.

                  This way squid wil not be able to connect to any China web site if firewall is blocking access to China's ips.

                  Treinamentos de Elite: http://sys-squad.com

                  Help a community developer! ;D

                  1 Reply Last reply Reply Quote 0
                  • T
                    taryezveb
                    last edited by

                    Thanks for that explanation, I understand it better :) But I'm still not sure how the floating rule(s) show be properly created.

                    Like this?:

                    Action: Reject
                    Interface: WAN
                    Direction: any
                    Protocol: any
                    Source: any
                    Destination: pfBlockerAliasname
                    Description: pfBlockerAliasname-Squid

                    Sorry if these are obvious questions.

                    1 Reply Last reply Reply Quote 0
                    • marcellocM
                      marcelloc
                      last edited by

                      Change interface to any and direction to out.

                      Treinamentos de Elite: http://sys-squad.com

                      Help a community developer! ;D

                      1 Reply Last reply Reply Quote 0
                      • T
                        taryezveb
                        last edited by

                        Ok, Thanks a lot for your help! :)

                        1 Reply Last reply Reply Quote 0
                        • F
                          fsavoir
                          last edited by

                          Hi,
                          I'm new to this list…. But great work on pfSense and all packages.
                          On my french install system pfBlocker never and any rules to firewall any tips? to track this down?
                          pfSense 2.0.1 and pfBlock 1.0.1

                          Thanks.

                          Fred

                          1 Reply Last reply Reply Quote 0
                          • marcellocM
                            marcelloc
                            last edited by

                            You need at least one firewall rule on interface you want to configure pfBlocker.

                            Treinamentos de Elite: http://sys-squad.com

                            Help a community developer! ;D

                            1 Reply Last reply Reply Quote 0
                            • F
                              fsavoir
                              last edited by

                              Hi,

                              Thanks for your reply… I did have the default rules...... Isn't enough ?
                              "

                              • RFC 1918 networks * * * * * Block private networks
                              • Reserved/not assigned by IANA * * * * * * Block bogon networks
                                "

                              Thanks.

                              Fred

                              1 Reply Last reply Reply Quote 0
                              • marcellocM
                                marcelloc
                                last edited by

                                Default rules are not saved on interface rules config XML.

                                Create a rule and then apply pfBlocker config.

                                Treinamentos de Elite: http://sys-squad.com

                                Help a community developer! ;D

                                1 Reply Last reply Reply Quote 0
                                • F
                                  fsavoir
                                  last edited by

                                  Thanks again for your reply,

                                  Could we be more specific? I need to add a rule in Firewall -> Rules then Lan or Wan ?

                                  Such a dummy rules?

                                  Thanks again.

                                  Fred

                                  1 Reply Last reply Reply Quote 0
                                  • marcellocM
                                    marcelloc
                                    last edited by

                                    Lan has a default rule, you will see pfBlocker rules there if you apply deny outbound action on your lists.

                                    If you have no wan rules, you do not need deny inbound action on pfblocker lists as you are already blocking everything.

                                    Treinamentos de Elite: http://sys-squad.com

                                    Help a community developer! ;D

                                    1 Reply Last reply Reply Quote 0
                                    • F
                                      fsavoir
                                      last edited by

                                      ok may be I don't explain well enough… But pfblocker never add any rules in any tabs (lan, wan, floating) of the firewall.
                                      So even If I had one in floating ... then select turn on pfblocker and add top country spammers... always a red down arrow :( and no rules anywear.

                                      So I think I'm missing something here :(

                                      I even added a rules to myself in the Lan... Still Red arrow.

                                      Again thanks.

                                      Fred

                                      1 Reply Last reply Reply Quote 0
                                      • F
                                        fsavoir
                                        last edited by

                                        OK fixed…
                                        I had to add by adding a floating rules to myself.... then all top spammers list.... Then active the pfblocker package.
                                        then it works .... Thanks again for your great support and SUPER COOL package.
                                        Cheers,

                                        Fred

                                        1 Reply Last reply Reply Quote 0
                                        • F
                                          fsavoir
                                          last edited by

                                          Hi,

                                          I'm wondering if you know how to make pfBlocker XMLRPC with Denyhost site ?
                                          http://xmlrpc.denyhosts.net:9911

                                          Thanks.

                                          Fred

                                          1 Reply Last reply Reply Quote 0
                                          • F
                                            fsavoir
                                            last edited by

                                            What is list format that pfBlocker could handle ? Like  : P2P, DAT or CIDR ? in .gz, zip or txt ?

                                            Thanks one more for your support.

                                            Fred

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.