Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Cannot block single host or alias? [SOLVED] Now: Block bittorrent

    Scheduled Pinned Locked Moved Firewalling
    14 Posts 5 Posters 5.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • marcellocM
      marcelloc
      last edited by

      You can input host fqdn instead of ip addresses.

      Are you setting this rule on lan and putting it on top of allow rules?

      Treinamentos de Elite: http://sys-squad.com

      Help a community developer! ;D

      1 Reply Last reply Reply Quote 0
      • S
        SirMacke
        last edited by

        @marcelloc:

        You can input host fqdn instead of ip addresses.

        Are you setting this rule on lan and putting it on top of allow rules?

        Lol.
        It was 15 minute delay, now it works.
        Is there any way to block torrent-traffic?

        [[/b] Corsair HX620W ] [[/b] AMD Phenom II 965BE C3 @ 4Ghz ] [[/b] Asus Crosshair IV Formula ] [[/b] GTX560Ti @ 950Mhz ]
        [[/b] 8Gb Mushkin 1600Mhz DDR3 Blackline ] [[/b] Corsair Force GT 120Gb + 3.5TB Hdd ]
        ****

        1 Reply Last reply Reply Quote 0
        • S
          SirMacke
          last edited by

          @marcelloc:

          You can input host fqdn instead of ip addresses.

          Are you setting this rule on lan and putting it on top of allow rules?

          Quting again.
          I cannot enter www.youtube.com, http://www.youtube.com or youtube.com as host, pfsense says invalid host.
          Bug or feature?

          [[/b] Corsair HX620W ] [[/b] AMD Phenom II 965BE C3 @ 4Ghz ] [[/b] Asus Crosshair IV Formula ] [[/b] GTX560Ti @ 950Mhz ]
          [[/b] 8Gb Mushkin 1600Mhz DDR3 Blackline ] [[/b] Corsair Force GT 120Gb + 3.5TB Hdd ]
          ****

          1 Reply Last reply Reply Quote 0
          • marcellocM
            marcelloc
            last edited by

            Did you checked if dns defined on pfsense configuration is working?

            Treinamentos de Elite: http://sys-squad.com

            Help a community developer! ;D

            1 Reply Last reply Reply Quote 0
            • S
              SirMacke
              last edited by

              @marcelloc:

              Did you checked if dns defined on pfsense configuration is working?

              Where do I do that?
              ::)

              [[/b] Corsair HX620W ] [[/b] AMD Phenom II 965BE C3 @ 4Ghz ] [[/b] Asus Crosshair IV Formula ] [[/b] GTX560Ti @ 950Mhz ]
              [[/b] 8Gb Mushkin 1600Mhz DDR3 Blackline ] [[/b] Corsair Force GT 120Gb + 3.5TB Hdd ]
              ****

              1 Reply Last reply Reply Quote 0
              • marcellocM
                marcelloc
                last edited by

                At console you can do nslookup www.youtube.com

                Treinamentos de Elite: http://sys-squad.com

                Help a community developer! ;D

                1 Reply Last reply Reply Quote 0
                • T
                  toomeek
                  last edited by

                  ehh man.. I block sites this way
                  (put blocking rules first before any other rules)

                  pfsense-blocked-www.png
                  pfsense-blocked-www.png_thumb
                  pfsense-blocked-www2.png
                  pfsense-blocked-www2.png_thumb

                  1 Reply Last reply Reply Quote 0
                  • C
                    costasppc
                    last edited by

                    Good!

                    When something is blocked, is there a way of users get a page that informs them of company policy?

                    Also, is there a way of blocking all torrents?

                    Best

                    Kostas

                    1 Reply Last reply Reply Quote 0
                    • N
                      Nachtfalke
                      last edited by

                      @costasppc:

                      Good!

                      When something is blocked, is there a way of users get a page that informs them of company policy?

                      Use squid +squidguard or squid+dansguardian

                      @costasppc:

                      Also, is there a way of blocking all torrents?

                      Best

                      Kostas

                      Probably not. You can try to block .torrent files or pages with squidguard/dansguardian and then redirect to your company policy page.

                      1 Reply Last reply Reply Quote 0
                      • C
                        costasppc
                        last edited by

                        Thank you, and sorry to hijack this thread…

                        Is squid +squidguard or squid+dansguardian works reliably with multiWAN?

                        Best regards

                        Kostas

                        1 Reply Last reply Reply Quote 0
                        • marcellocM
                          marcelloc
                          last edited by

                          @costasppc:

                          Is squid +squidguard or squid+dansguardian works reliably with multiWAN?

                          Yes, configure tcp_outgoing_address 127.0.0.1 on squid and then configure a floating rule to balance outgoing http access.

                          Treinamentos de Elite: http://sys-squad.com

                          Help a community developer! ;D

                          1 Reply Last reply Reply Quote 0
                          • C
                            costasppc
                            last edited by

                            Thank you!

                            What is preferred squid+squidguard or squid+dansguardian?

                            Where should I configure the floating rule?

                            What about https? I have now an https failover rule, because of round robin problem with banking sites.

                            Best regards

                            Kostas

                            1 Reply Last reply Reply Quote 0
                            • marcellocM
                              marcelloc
                              last edited by

                              @costasppc:

                              What is preferred squid+squidguard or squid+dansguardian?

                              it's up to you. squidguard is free and dansguardian can do antivirus as well content filtering

                              @costasppc:

                              Where should I configure the floating rule?

                              go on firewall -> rules -> floating

                              @costasppc:

                              What about https? I have now an https failover rule, because of round robin problem with banking sites.

                              It's normal on sites that do not accept request from the same session on different ips

                              Treinamentos de Elite: http://sys-squad.com

                              Help a community developer! ;D

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.