Blocking Ultrasurf with pfSense 2.0

[CrackBlue]

Try this.

I have created an alias of LEGALPORTS (80, 443, 53, 3128 and some ports you consider necessary) to be allowed, then from the Firewall Rule, i added outbound connections for LAN specifying LEGALPORTS as their destination ports.  I have not tested this one out for ultrasurf but works for blocking torrents.  But will try anyway on my side.

Thanks.

[Nonsense]

Steve:

Well, the plot thickens, unfortunately, my situation has gone from bad to worse.  In the midst of experimenting with alternate "modem access" configurations on pfSense last night I lost the connection with my Viking modem card.  I restored two of my prior-working configurations to no avail: pfSense is not able to talk to my modem.  I can no longer connect to the internet and I cannot ping my modem's IP address inside pfSense.  pfSense, however, sees the adapter on my modem and the modem is syncing with my ISP's DSLAM (pppoE over Ethernet over ATM–my ISP records show the ATM path established).

I can't imagine how any changes I made to pfSense would have caused this problem, as I have reset and reconfigured it several times.  I did make some changes to my modem configuration, however, while I had access to it and while I still had internet access through it.  I changed its password as well as its date and time settings--these changes should have had no effect on connectivity.  I also changed its default access IP address (I did not change its subnet)--again, this change should not have affected connectivity.  Additionally, however, I compulsively changed its MTU setting from 1500 to 1492 (located in the same gui screen area as the IP address setting)--I have a feeling that this change may be the culpret--perhaps the modem does not like this latter setting changed when it is in bridge mode.  I violated my trusted dictum in making these changes--change only one variable at a time and reboot the system between changes when you are unsure what the results might be.

So I wasted another four hours on this project last night.  The Viking card has been a grand time consumer: it is neither well documented nor supported by its manufacturer--who is almost impossible to contact via e-mail--and the card is no longer in production.  My next step will be to do a hardware reset of the card--then I will see if I can access it in pfSense and switch it back into bridge mode via telnet.  This task will be a bear, as I will have to pull my 1U rack-mounted unit out of its cabinet, open its chassis, and access the reset pins on the Viking card--the card is mounted face down on a 90 degree riser in the chassis, so I may have to pull it out to find its reset pins.

So that is how I will be spending my Thanksgiving weekend.

[dyrandz]

The steps above is not working using the new version of Ultrasurf  >:(.

-Randy

[dyrandz]

Updated Custom Lists:

65.49.14.0/24
63.215.202.0/24
207.171.185.0/24
207.171.189.0/24
72.21.194.31/31
101.128.162.237/31
175.180.102.77/31
122.120.64.0/24
111.255.130.151/31
1.160.238.30/31
124.12.53.63/31
220.136.246.137/31
70.32.68.127/31
207.171.163.151/31
175.180.85.181/31
129.59.210.101/31
174.24.248.14/31
114.25.182.57/31
114.39.201.136/31
72.21.194.33/31
124.11.175.111/31
61.230.180.191/31
72.21.214.0/24
124.11.174.122/31
207.171.187.117/31
111.254.118.171/31
218.169.205.131/31
112.104.197.114/31
72.21.194.0/24
111.242.22.245/31
220.141.106.42/31
111.250.193.106/31
111.249.177.164/31
114.25.11.175/31
114.39.205.22/31
205.251.242.164/31
72.21.203.148/31
61.223.97.169/31
124.12.53.63/31
65.49.14.0/24
124.11.175.28/31
122.121.19.6/31
65.49.2.13/31
24.11.192.219/31
220.136.246.137/31
63.215.202.6/31
114.40.37.203/31
72.69.176.100/31
114.47.85.88/31
112.105.119.46/31
123.204.125.161/31
184.26.194.70/31
1.169.120.246/31
1.160.0.0/16
1.162.0.0/16
1.168.0.0/16
1.169.0.0/16
1.170.0.0/16
1.171.0.0/16
1.172.0.0/16
1.173.0.0/16
1.174.0.0/16
1.175.0.0/16
114.45.170.0/24
122.124.162.0/24
65.49.14.0/24
61.223.97.0/24
124.12.53.0/24
112.104.197.0/24
124.11.53.0/24
216.13.11.51/31
72.21.211.170/31
122.126.124.13/31
61.230.180.173/31
111.255.145.159/31
101.128.162.237/31
124.11.170.214/31
1.160.120.246/31
124.11.192.176/31
124.12.54.173/31
112.105.77.240/31
220.141.154.81/31
114.47.113.94/31
67.19.60.8/31
64.25.35.201/31
124.12.32.176/31
211.74.191.69/31
64.4.44.80/31
125.230.125.163/31
64.25.35.101/31
175.181.112.39/31
207.171.163.161/31
114.46.161.107/31
63.245.209.31/31
128.120.32.97/31
112.105.87.62/31
216.13.113.51/31
218.165.24.161/31
118.171.193.179/31
70.32.68.127/31
59.112.114.149/31
113.197.194.199/31
59.113.2.250/31
111.242.6.218/31
124.9.197.126/31
114.25.0.2/31
124.11.196.43/31
111.254.211.65/31
66.245.218.3/31
203.73.50.4/31
124.11.224.38/31
1.170.151.113/31
218.167.224.59/31
125.231.91.189/31
218.167.224.113/31
61.230.182.171/31
207.171.163.225/31
203.73.55.210/31
63.226.208.181/31
59.112.116.233/31
207.171.163.3/31
125.232.184.53/31
175.182.30.182/31
114.40.42.214/31
219.80.130.235/31
59.112.115.93/31
218.173.162.58/31
111.255.132.243/31
111.254.214.163/31
111.240.152.228/31
1.169.171.87/31
122.125.36.24/31
111.242.37.253/31
61.230.113.122/31
124.11.189.196/31
218.169.182.134/31
118.160.104.136/31
114.25.7.27/31
207.171.163.195/31
114.47.69.24/31
124.11.224.197/31
114.40.26.207/31
111.250.71.235/31
124.11.229.119/31
114.41.64.36/31
111.242.3.157/31
111.255.138.181/31
114.40.31.114/31
114.37.111.204/31
114.25.19.121/31
111.242.36.94/31
218.167.4.85/31
114.25.1.44/31
70.32.68.127/31
118.96.153.161/31
114.41.25.53/31
122.121.17.23/31
111.255.130.127/31
114.40.40.229/31
111.255.132.2/31
118.171.194.210/31
111.242.8.4/31
118.214.82.70/31
114.39.204.244/31
118.170.208.85/31
125.224.242.61/31
118.169.59.42/31
114.40.117.58/31
107.20.223.211/31
65.49.2.18/31
124.11.227.214/31
124.12.56.57/31
118.169.59.42/31
122.125.1.93/31
61.228.34.89/31
65.49.14.0/24
65.49.2.0/24
118.160.0.0/13
63.216.0.0/13
199.14.0.0/16
199.11.0.0/16
199.12.0.0/15
97.76.0.0/14
220.129.0.0/16
220.130.0.0/15
220.132.0.0/14
220.136.0.0/13
114.32.0.0/12
199.114.216.0/21
118.168.0.0/14
96.9.128.0/18
176.31.59.64/26
46.37.180.160/28
69.61.18.64/26
65.49.14.0/24
87.117.245.128/25
46.22.212.64/27
37.59.199.224/27
121.102.0.0/16
64.120.128.0/17
125.224.0.0/13
149.5.0.0/16
122.120.0.0/13
61.220.0.0/14
61.224.0.0/14
122.118.0.0/16
184.82.0.0/16
124.8.0.0/14
124.12.0.0/16
80.79.125.32/27
46.22.214.0/27
207.195.224.0/20
112.104.0.0/15
212.69.191.192/27
76.191.100.0/22
111.240.0.0/12
59.104.0.0/15
211.74.0.0/17
216.81.80.0/20
69.61.15.0/26
114.24.0.0/14
36.224.0.0/12
66.201.64.0/18
96.9.128.0/18
124.147.64.0/18
175.180.0.0/14
69.61.0.0/17
66.160.128.0/18
66.160.192.0/20
70.48.0.0/13
1.160.0.0/12
212.69.191.32/27
173.208.128.0/17
93.186.169.64/26
80.79.112.32/27
216.198.220.96/27
218.160.0.0/12
61.31.0.0/16
212.69.166.0/27

I was able to stop Ultrasurf 12.07

[badul]

;D  yahooo…thank a lot guys...and especially to mr mcchin...Thanks. You've just made my day...but some of the staff didn't like this... :P hehehehehehehe

[haha222]

Thank you very much for this topic. It make me reduce my problem and increases time in my life.

[johnnybe]

@dyrandz:

Updated Custom Lists:
…
I was able to stop Ultrasurf 12.07

Didn't work with Ultrasurf 12.07. Works with Ultrasurf 12.01.

[dyrandz]

Update pfBlock Lists:

65.49.14.0/24
63.215.202.0/24
207.171.185.0/24
207.171.189.0/24
72.21.194.31/31
101.128.162.237/31
175.180.102.77/31
122.120.64.0/24
111.255.130.151/31
1.160.238.30/31
124.12.53.63/31
220.136.246.137/31
70.32.68.127/31
207.171.163.151/31
175.180.85.181/31
129.59.210.101/31
174.24.248.14/31
114.25.182.57/31
114.39.201.136/31
72.21.194.33/31
124.11.175.111/31
61.230.180.191/31
72.21.214.0/24
124.11.174.122/31
207.171.187.117/31
111.254.118.171/31
218.169.205.131/31
112.104.197.114/31
72.21.194.0/24
111.242.22.245/31
220.141.106.42/31
111.250.193.106/31
111.249.177.164/31
114.25.11.175/31
114.39.205.22/31
205.251.242.164/31
72.21.203.148/31
61.223.97.169/31
124.12.53.63/31
65.49.14.0/24
124.11.175.28/31
122.121.19.6/31
65.49.2.13/31
24.11.192.219/31
220.136.246.137/31
63.215.202.6/31
114.40.37.203/31
72.69.176.100/31
114.47.85.88/31
112.105.119.46/31
123.204.125.161/31
184.26.194.70/31
1.169.120.246/31
1.160.0.0/16
1.162.0.0/16
1.168.0.0/16
1.169.0.0/16
1.170.0.0/16
1.171.0.0/16
1.172.0.0/16
1.173.0.0/16
1.174.0.0/16
1.175.0.0/16
114.45.170.0/24
122.124.162.0/24
65.49.14.0/24
61.223.97.0/24
124.12.53.0/24
112.104.197.0/24
124.11.53.0/24
216.13.11.51/31
72.21.211.170/31
122.126.124.13/31
61.230.180.173/31
111.255.145.159/31
101.128.162.237/31
124.11.170.214/31
1.160.120.246/31
124.11.192.176/31
124.12.54.173/31
112.105.77.240/31
220.141.154.81/31
114.47.113.94/31
67.19.60.8/31
64.25.35.201/31
124.12.32.176/31
211.74.191.69/31
64.4.44.80/31
125.230.125.163/31
64.25.35.101/31
175.181.112.39/31
207.171.163.161/31
114.46.161.107/31
63.245.209.31/31
128.120.32.97/31
112.105.87.62/31
216.13.113.51/31
218.165.24.161/31
118.171.193.179/31
70.32.68.127/31
59.112.114.149/31
113.197.194.199/31
59.113.2.250/31
111.242.6.218/31
124.9.197.126/31
114.25.0.2/31
124.11.196.43/31
111.254.211.65/31
66.245.218.3/31
203.73.50.4/31
124.11.224.38/31
1.170.151.113/31
218.167.224.59/31
125.231.91.189/31
218.167.224.113/31
61.230.182.171/31
207.171.163.225/31
203.73.55.210/31
63.226.208.181/31
59.112.116.233/31
207.171.163.3/31
125.232.184.53/31
175.182.30.182/31
114.40.42.214/31
219.80.130.235/31
59.112.115.93/31
218.173.162.58/31
111.255.132.243/31
111.254.214.163/31
111.240.152.228/31
1.169.171.87/31
122.125.36.24/31
111.242.37.253/31
61.230.113.122/31
124.11.189.196/31
218.169.182.134/31
118.160.104.136/31
114.25.7.27/31
207.171.163.195/31
114.47.69.24/31
124.11.224.197/31
114.40.26.207/31
111.250.71.235/31
124.11.229.119/31
114.41.64.36/31
111.242.3.157/31
111.255.138.181/31
114.40.31.114/31
114.37.111.204/31
114.25.19.121/31
111.242.36.94/31
218.167.4.85/31
114.25.1.44/31
70.32.68.127/31
118.96.153.161/31
114.41.25.53/31
122.121.17.23/31
111.255.130.127/31
114.40.40.229/31
111.255.132.2/31
118.171.194.210/31
111.242.8.4/31
118.214.82.70/31
114.39.204.244/31
118.170.208.85/31
125.224.242.61/31
118.169.59.42/31
114.40.117.58/31
107.20.223.211/31
65.49.2.18/31
124.11.227.214/31
124.12.56.57/31
118.169.59.42/31
122.125.1.93/31
61.228.34.89/31
65.49.14.0/24
65.49.2.0/24
118.160.0.0/13
63.216.0.0/13
199.14.0.0/16
199.11.0.0/16
199.12.0.0/15
97.76.0.0/14
220.129.0.0/16
220.130.0.0/15
220.132.0.0/14
220.136.0.0/13
114.32.0.0/12
199.114.216.0/21
118.168.0.0/14
96.9.128.0/18
176.31.59.64/26
46.37.180.160/28
69.61.18.64/26
65.49.14.0/24
87.117.245.128/25
46.22.212.64/27
37.59.199.224/27
121.102.0.0/16
64.120.128.0/17
125.224.0.0/13
149.5.0.0/16
122.120.0.0/13
61.220.0.0/14
61.224.0.0/14
122.118.0.0/16
184.82.0.0/16
124.8.0.0/14
124.12.0.0/16
80.79.125.32/27
46.22.214.0/27
207.195.224.0/20
112.104.0.0/15
212.69.191.192/27
76.191.100.0/22
111.240.0.0/12
59.104.0.0/15
211.74.0.0/17
216.81.80.0/20
69.61.15.0/26
114.24.0.0/14
36.224.0.0/12
66.201.64.0/18
96.9.128.0/18
124.147.64.0/18
175.180.0.0/14
69.61.0.0/17
66.160.128.0/18
66.160.192.0/20
70.48.0.0/13
1.160.0.0/12
212.69.191.32/27
173.208.128.0/17
93.186.169.64/26
80.79.112.32/27
216.198.220.96/27
218.160.0.0/12
61.31.0.0/16
212.69.166.0/27
64.228.0.0/14
218.187.112.0/20
204.101.111.0/24

[johnnybe]

@dyrandz:

Update pfBlock Lists:

….

Very nice, dyrandz!
Now it works with Ultrasurf 12.07 using Alias/Rule. But, while Ultrasurf is running, you can't go anywhere. Even browse the pfSense GUI is blocked. LOL.
2.1-BETA0 (amd64)
built on Mon Nov 19 09:10:59 EST 2012
FreeBSD 8.3-RELEASE-p4

Edit 12/02: Running Ultrasurf as Administrator (Windows 7) it can reach the servers. :(

[dyrandz]

Please follow the instruction at page 1 first post, mcchin wrote it.

[mcchin]

@m4st3rc1p0:

@mcchin can you send me the apps you are talking.

You can download from link at the post #4

[mcchin]

Update custome list for Ultrasurf 12.10

65.49.14.0/24
63.215.202.0/24
207.171.185.0/24
207.171.189.0/24
72.21.194.31/31
101.128.162.237/31
175.180.102.77/31
122.120.64.0/24
111.255.130.151/31
1.160.238.30/31
124.12.53.63/31
220.136.246.137/31
70.32.68.127/31
207.171.163.151/31
175.180.85.181/31
129.59.210.101/31
174.24.248.14/31
114.25.182.57/31
114.39.201.136/31
72.21.194.33/31
124.11.175.111/31
61.230.180.191/31
72.21.214.0/24
124.11.174.122/31
207.171.187.117/31
111.254.118.171/31
218.169.205.131/31
112.104.197.114/31
72.21.194.0/24
111.242.22.245/31
220.141.106.42/31
111.250.193.106/31
111.249.177.164/31
114.25.11.175/31
114.39.205.22/31
205.251.242.164/31
72.21.203.148/31
61.223.97.169/31
124.12.53.63/31
65.49.14.0/24
124.11.175.28/31
122.121.19.6/31
65.49.2.13/31
24.11.192.219/31
220.136.246.137/31
63.215.202.6/31
114.40.37.203/31
72.69.176.100/31
114.47.85.88/31
112.105.119.46/31
123.204.125.161/31
184.26.194.70/31
1.169.120.246/31
1.160.0.0/16
1.162.0.0/16
1.168.0.0/16
1.169.0.0/16
1.170.0.0/16
1.171.0.0/16
1.172.0.0/16
1.173.0.0/16
1.174.0.0/16
1.175.0.0/16
114.45.170.0/24
122.124.162.0/24
65.49.14.0/24
61.223.97.0/24
124.12.53.0/24
112.104.197.0/24
124.11.53.0/24
216.13.11.51/31
72.21.211.170/31
122.126.124.13/31
61.230.180.173/31
111.255.145.159/31
101.128.162.237/31
124.11.170.214/31
1.160.120.246/31
124.11.192.176/31
124.12.54.173/31
112.105.77.240/31
220.141.154.81/31
114.47.113.94/31
67.19.60.8/31
64.25.35.201/31
124.12.32.176/31
211.74.191.69/31
64.4.44.80/31
125.230.125.163/31
64.25.35.101/31
175.181.112.39/31
207.171.163.161/31
114.46.161.107/31
63.245.209.31/31
128.120.32.97/31
112.105.87.62/31
216.13.113.51/31
218.165.24.161/31
118.171.193.179/31
70.32.68.127/31
59.112.114.149/31
113.197.194.199/31
59.113.2.250/31
111.242.6.218/31
124.9.197.126/31
114.25.0.2/31
124.11.196.43/31
111.254.211.65/31
66.245.218.3/31
203.73.50.4/31
124.11.224.38/31
1.170.151.113/31
218.167.224.59/31
125.231.91.189/31
218.167.224.113/31
61.230.182.171/31
207.171.163.225/31
203.73.55.210/31
63.226.208.181/31
59.112.116.233/31
207.171.163.3/31
125.232.184.53/31
175.182.30.182/31
114.40.42.214/31
219.80.130.235/31
59.112.115.93/31
218.173.162.58/31
111.255.132.243/31
111.254.214.163/31
111.240.152.228/31
1.169.171.87/31
122.125.36.24/31
111.242.37.253/31
61.230.113.122/31
124.11.189.196/31
218.169.182.134/31
118.160.104.136/31
114.25.7.27/31
207.171.163.195/31
114.47.69.24/31
124.11.224.197/31
114.40.26.207/31
111.250.71.235/31
124.11.229.119/31
114.41.64.36/31
111.242.3.157/31
111.255.138.181/31
114.40.31.114/31
114.37.111.204/31
114.25.19.121/31
111.242.36.94/31
218.167.4.85/31
114.25.1.44/31
70.32.68.127/31
118.96.153.161/31
114.41.25.53/31
122.121.17.23/31
111.255.130.127/31
114.40.40.229/31
111.255.132.2/31
118.171.194.210/31
111.242.8.4/31
118.214.82.70/31
114.39.204.244/31
118.170.208.85/31
125.224.242.61/31
118.169.59.42/31
114.40.117.58/31
107.20.223.211/31
65.49.2.18/31
124.11.227.214/31
124.12.56.57/31
118.169.59.42/31
122.125.1.93/31
61.228.34.89/31
65.49.14.0/24
65.49.2.0/24
118.160.0.0/13
63.216.0.0/13
199.14.0.0/16
199.11.0.0/16
199.12.0.0/15
97.76.0.0/14
220.129.0.0/16
220.130.0.0/15
220.132.0.0/14
220.136.0.0/13
114.32.0.0/12
199.114.216.0/21
118.168.0.0/14
96.9.128.0/18
176.31.59.64/26
46.37.180.160/28
69.61.18.64/26
65.49.14.0/24
87.117.245.128/25
46.22.212.64/27
37.59.199.224/27
121.102.0.0/16
64.120.128.0/17
125.224.0.0/13
149.5.0.0/16
122.120.0.0/13
61.220.0.0/14
61.224.0.0/14
122.118.0.0/16
184.82.0.0/16
124.8.0.0/14
124.12.0.0/16
80.79.125.32/27
46.22.214.0/27
207.195.224.0/20
112.104.0.0/15
212.69.191.192/27
76.191.100.0/22
111.240.0.0/12
59.104.0.0/15
211.74.0.0/17
216.81.80.0/20
69.61.15.0/26
114.24.0.0/14
36.224.0.0/12
66.201.64.0/18
96.9.128.0/18
124.147.64.0/18
175.180.0.0/14
69.61.0.0/17
66.160.128.0/18
66.160.192.0/20
70.48.0.0/13
1.160.0.0/12
212.69.191.32/27
173.208.128.0/17
93.186.169.64/26
80.79.112.32/27
216.198.220.96/27
218.160.0.0/12
61.31.0.0/16
212.69.166.0/27
64.228.0.0/14
218.187.112.0/20
204.101.111.0/24
118.171.236.62/32
183.0.0.0/10
219.80.0.0/15

[johnnybe]

Thanks a lot, mcchin.