Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PfBlocker

    Scheduled Pinned Locked Moved pfSense Packages
    896 Posts 143 Posters 1.3m Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • marcellocM
      marcelloc
      last edited by

      HI, for those who want to test an updated country list from a new source before I try to update it on package install, follow these steps on console

      
      cd /usr/local/pkg
      /usr/bin/fetch http://e-sac.siteseguro.ws/pfsense/pfblocker/Africa_cidr.txt
      /usr/bin/fetch http://e-sac.siteseguro.ws/pfsense/pfblocker/Asia_cidr.txt
      /usr/bin/fetch http://e-sac.siteseguro.ws/pfsense/pfblocker/Europe_cidr.txt
      /usr/bin/fetch http://e-sac.siteseguro.ws/pfsense/pfblocker/North_America_cidr.txt
      /usr/bin/fetch http://e-sac.siteseguro.ws/pfsense/pfblocker/Oceania_cidr.txt
      /usr/bin/fetch http://e-sac.siteseguro.ws/pfsense/pfblocker/South_America_cidr.txt
      php /usr/local/www/pfblocker.php uc
      
      

      After this, access pfblocker gui and save config again.

      You can check applied networks/cidrs on diagnostics -> tables

      Treinamentos de Elite: http://sys-squad.com

      Help a community developer! ;D

      1 Reply Last reply Reply Quote 0
      • BBcan177B
        BBcan177 Moderator
        last edited by

        @marcelloc:

        HI, for those who want to test an updated country list from a new source before I try to update it on package install, follow these steps on console

        Hi Marcello,

        This updates correctly. What is the source of the Country code files if you don't mind sharing?

        Thanks.

        "Experience is something you don't get until just after you need it."

        Website: http://pfBlockerNG.com
        Twitter: @BBcan177  #pfBlockerNG
        Reddit: https://www.reddit.com/r/pfBlockerNG/new/

        1 Reply Last reply Reply Quote 0
        • T
          tommyboy180
          last edited by

          I was just going through some notes on pfblocker. This brought back some memories. I thought I would share with you guys since it's apart of the pfblocker past.

          ipblocklist
          HOLD - cidr
          dashboard HUD
          Remove IPFW Flush
          Complete - ensure /usr/local/pkg/pf/ .sh is removed
          Complete - whitelists on reboot
          Complete - logging doesn't stay enabled when you click save/update
          Complete - remove unique -u to just unique
          Complete - remove warning from GUI
          Complete - add lvl1 by default
          Complete - change description to use the phrase peerblock
          Complete - remove "ipfw -f flush" commands from php and uninstall process.
          Complete - setenv PACKAGESITE "ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-8-stable/Latest/" before pkg_add -r "package"
          Complete - pkg_add -r p5-NET-CIDR p5-Net-CIDR-0.14 CURRENT
          Complete - pkg_add -r perl    perl-5.10.1_1    TO  perl-5.12.4_2
          Complete - don't uninstall perl and p5-cidr-net at uninstall

          countryblock
          Complete - ensure /usr/local/pkg/pf/ .sh is removed
          Complete - update CIDR.php file
          Complete - Remove Email
          Remove IPFW Flush

          strikeback
          auto start
          auto settings (root user)

          ideas:
          hybrid ipblockist and countryblock. Tab seperate the roles.  one package - one stop shop. Name: Layer3 Shield or Layer3 Filter or Security
          iplocklist and countryblock redirection on outbound if going to blocked ip's!!!

          This note is dated 2010!

          -Tom Schaefer
          SuperMicro 1U 2X Intel pro/1000 Dual Core Intel 2.2 Ghz - 2 Gig RAM

          Please support pfBlocker | File Browser | Strikeback

          1 Reply Last reply Reply Quote 0
          • BBcan177B
            BBcan177 Moderator
            last edited by

            @tommyboy180:

            I was just going through some notes on pfblocker. This brought back some memories. I thought I would share with you guys since it's apart of the pfblocker past.

            This note is dated 2010!

            If you guys are interested I have a working BETA for pfBlocker that incorporates features that lots of us would like to see in a new release of pfBlocker.  :)

            "Experience is something you don't get until just after you need it."

            Website: http://pfBlockerNG.com
            Twitter: @BBcan177  #pfBlockerNG
            Reddit: https://www.reddit.com/r/pfBlockerNG/new/

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              Can't imagine anyone would be intested in that.  ;)
              Oh wait….

              1 Reply Last reply Reply Quote 0
              • K
                kilthro
                last edited by

                @stephenw10:

                Can't imagine anyone would be intested in that.  ;)
                Oh wait….

                rofl

                @BBcan177:

                @tommyboy180:

                I was just going through some notes on pfblocker. This brought back some memories. I thought I would share with you guys since it's apart of the pfblocker past.

                This note is dated 2010!

                If you guys are interested I have a working BETA for pfBlocker that incorporates features that lots of us would like to see in a new release of pfBlocker.  :)

                Please share. :-D  I would love to see this package get a facelift and some TLC. Besides Snort this is one of the must have packages imo.

                1 Reply Last reply Reply Quote 0
                • K
                  kilthro
                  last edited by

                  @tommyboy180:

                  I was just going through some notes on pfblocker. This brought back some memories. I thought I would share with you guys since it's apart of the pfblocker past.

                  This note is dated 2010!

                  /gasp!

                  1 Reply Last reply Reply Quote 0
                  • BBcan177B
                    BBcan177 Moderator
                    last edited by

                    They say a Picture is worth a 1000 words, so I will post 4 pics.

                    I have a few fellow members currently helping to Beta test the code. So far so good. I would like to change the behavior of the Rules Creation and the Loading of the Tables in my next round of changes to the pfBlocker Code.

                    Any programming help would also be appreciated to help expedite the process….  ;)

                    Link to the pfBlocker (General Tab)
                          http://imgur.com/h0708WP

                    Link to the pfBlocker (Reputation Tab)
                          http://imgur.com/9AGK95V

                    Link to the pfBlocker (LISTS Tab)
                          http://imgur.com/4Wgq4sk

                    Link to the pfBlokcer (LOG Tab)
                          http://imgur.com/SNQ85RT

                    "Experience is something you don't get until just after you need it."

                    Website: http://pfBlockerNG.com
                    Twitter: @BBcan177  #pfBlockerNG
                    Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                    1 Reply Last reply Reply Quote 0
                    • panzP
                      panz
                      last edited by

                      I can't load any list into pfBlocker that is bigger than 10 MB: it crashes with an out if memory error, even if I choose the Alias creation.

                      pfSense 2.3.2-RELEASE-p1 (amd64)
                      motherboard: MSI C847MS-E33 Micro ATX (with Intel Celeron CPU 847 @ 1.10 GHz) ~ PSU: Corsair VS350 ~ RAM: Kingston KVR1333D3E9S 4096 MB 240-pin DIMM DDR3 SDRAM 1.5 volt ~ NIC: Intel EXPI9301CTBLK (LAN) ~ NIC: D-Link DFE-528TX (CAM) ~ Hard Disk: Western Digital WD10JFCX Red ~ Case: Cooler Master HAF XB ~ power consumption: 21 Watts.

                      1 Reply Last reply Reply Quote 0
                      • BBcan177B
                        BBcan177 Moderator
                        last edited by

                        @panz:

                        I can't load any list into pfBlocker that is bigger than 10 MB: it crashes with an out if memory error, even if I choose the Alias creation.

                        Which Blocklist is that large? Can you post the url? or is this an "Alias" that has multiple Lists within?

                        "Experience is something you don't get until just after you need it."

                        Website: http://pfBlockerNG.com
                        Twitter: @BBcan177  #pfBlockerNG
                        Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                        1 Reply Last reply Reply Quote 0
                        • panzP
                          panz
                          last edited by

                          @BBcan177:

                          @panz:

                          I can't load any list into pfBlocker that is bigger than 10 MB: it crashes with an out if memory error, even if I choose the Alias creation.

                          Which Blocklist is that large? Can you post the url? or is this an "Alias" that has multiple Lists within?

                          I have an I-BlockList paid account; it allows me to build a custom list which is a "compilation" of other available lists. I called this list "torrent", as it is composed by BlueTack Level-1, etc.

                          Their system generates a custom URL. Then I can use this URL to feed, for example, PeerBlock. The Windows program loads this list flawlessly. I expected that pfBlocker would handle the same list with no problems.

                          pfSense 2.3.2-RELEASE-p1 (amd64)
                          motherboard: MSI C847MS-E33 Micro ATX (with Intel Celeron CPU 847 @ 1.10 GHz) ~ PSU: Corsair VS350 ~ RAM: Kingston KVR1333D3E9S 4096 MB 240-pin DIMM DDR3 SDRAM 1.5 volt ~ NIC: Intel EXPI9301CTBLK (LAN) ~ NIC: D-Link DFE-528TX (CAM) ~ Hard Disk: Western Digital WD10JFCX Red ~ Case: Cooler Master HAF XB ~ power consumption: 21 Watts.

                          1 Reply Last reply Reply Quote 0
                          • BBcan177B
                            BBcan177 Moderator
                            last edited by

                            @panz:

                            I have an I-BlockList paid account

                            Some of the IBlock lists are not formatted the Same. I know the IBlock Adstrack and the IBlock Prime list have some incompatible characters that will cause pfBlocker to fail.

                            Try to remove one list at a time to determine which one is failing.

                            "Experience is something you don't get until just after you need it."

                            Website: http://pfBlockerNG.com
                            Twitter: @BBcan177  #pfBlockerNG
                            Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                            1 Reply Last reply Reply Quote 0
                            • panzP
                              panz
                              last edited by

                              @BBcan177:

                              @panz:

                              I have an I-BlockList paid account

                              Some of the IBlock lists are not formatted the Same. I know the IBlock Adstrack and the IBlock Prime list have some incompatible characters that will cause pfBlocker to fail.

                              Try to remove one list at a time to determine which one is failing.

                              If I load the same lists - one for each row in the pfBlocker pfSense GUI - the package doesn't give the error and works properly. But this is a very tedious and error prone method.

                              pfSense 2.3.2-RELEASE-p1 (amd64)
                              motherboard: MSI C847MS-E33 Micro ATX (with Intel Celeron CPU 847 @ 1.10 GHz) ~ PSU: Corsair VS350 ~ RAM: Kingston KVR1333D3E9S 4096 MB 240-pin DIMM DDR3 SDRAM 1.5 volt ~ NIC: Intel EXPI9301CTBLK (LAN) ~ NIC: D-Link DFE-528TX (CAM) ~ Hard Disk: Western Digital WD10JFCX Red ~ Case: Cooler Master HAF XB ~ power consumption: 21 Watts.

                              1 Reply Last reply Reply Quote 0
                              • BBcan177B
                                BBcan177 Moderator
                                last edited by

                                @panz:

                                If I load the same lists - one for each row in the pfBlocker pfSense GUI - the package doesn't give the error and works properly. But this is a very tedious and error prone method.

                                Then the issue is with the total size of the Single List. Can you break it down into 2-3 smaller Main Lists?

                                "Experience is something you don't get until just after you need it."

                                Website: http://pfBlockerNG.com
                                Twitter: @BBcan177  #pfBlockerNG
                                Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                                1 Reply Last reply Reply Quote 0
                                • panzP
                                  panz
                                  last edited by

                                  @BBcan177:

                                  @panz:

                                  If I load the same lists - one for each row in the pfBlocker pfSense GUI - the package doesn't give the error and works properly. But this is a very tedious and error prone method.

                                  Then the issue is with the total size of the Single List. Can you break it down into 2-3 smaller Main Lists?

                                  The great advantage of one "big" list is that I can change its "composition" without worrying to change the "recipe" in every program that uses that list (pfBlocker, PeerBlock, qBittorrent, etc.). I think that a "professional" tool like pfSense (and it's packages, like pfBlocker) should be able to deal with a list that even the last simple Windows program can handle…

                                  pfSense 2.3.2-RELEASE-p1 (amd64)
                                  motherboard: MSI C847MS-E33 Micro ATX (with Intel Celeron CPU 847 @ 1.10 GHz) ~ PSU: Corsair VS350 ~ RAM: Kingston KVR1333D3E9S 4096 MB 240-pin DIMM DDR3 SDRAM 1.5 volt ~ NIC: Intel EXPI9301CTBLK (LAN) ~ NIC: D-Link DFE-528TX (CAM) ~ Hard Disk: Western Digital WD10JFCX Red ~ Case: Cooler Master HAF XB ~ power consumption: 21 Watts.

                                  1 Reply Last reply Reply Quote 0
                                  • W
                                    wcrowder
                                    last edited by

                                    If your into torrents as heavy as you sound… These lists will not save you from the dreaded mail from your ISP or University. What they will help you with, and you will need it, if your into torrents this heavy; is help keep your computer clean and not become a BOT, which it probably already is...  :o You need to look into paying for a VPN service or something like that. There are several sites that deal with this, of course you will have to pay a little bit. Life is not free.

                                    Good news is I can block most, if not all, torrent traffic coming out from, or into my home network using pfBlocker and Suricata...  8), I don't get those letters... LOL...

                                    @panz:

                                    @BBcan177:

                                    @panz:

                                    If I load the same lists - one for each row in the pfBlocker pfSense GUI - the package doesn't give the error and works properly. But this is a very tedious and error prone method.

                                    Then the issue is with the total size of the Single List. Can you break it down into 2-3 smaller Main Lists?

                                    The great advantage of one "big" list is that I can change its "composition" without worrying to change the "recipe" in every program that uses that list (pfBlocker, PeerBlock, qBittorrent, etc.). I think that a "professional" tool like pfSense (and it's packages, like pfBlocker) should be able to deal with a list that even the last simple Windows program can handle…

                                    1 Reply Last reply Reply Quote 0
                                    • panzP
                                      panz
                                      last edited by

                                      @wcrowder:

                                      If your into torrents as heavy as you sound… These lists will not save you from the dreaded mail from your ISP or University. What they will help you with, and you will need it, if your into torrents this heavy; is help keep your computer clean and not become a BOT, which it probably already is...  :o You need to look into paying for a VPN service or something like that. There are several sites that deal with this, of course you will have to pay a little bit. Life is not free

                                      I forgot to mention that I'm using AirVPN and the event(s) that I want to filter out are generated by the AirVPN server (aka the Exit Node) :)

                                      pfSense 2.3.2-RELEASE-p1 (amd64)
                                      motherboard: MSI C847MS-E33 Micro ATX (with Intel Celeron CPU 847 @ 1.10 GHz) ~ PSU: Corsair VS350 ~ RAM: Kingston KVR1333D3E9S 4096 MB 240-pin DIMM DDR3 SDRAM 1.5 volt ~ NIC: Intel EXPI9301CTBLK (LAN) ~ NIC: D-Link DFE-528TX (CAM) ~ Hard Disk: Western Digital WD10JFCX Red ~ Case: Cooler Master HAF XB ~ power consumption: 21 Watts.

                                      1 Reply Last reply Reply Quote 0
                                      • W
                                        wcrowder
                                        last edited by

                                        Try System->Advanced-> <firewall nat="">and increase entry [Firewall Maximum Table Entries] to something like 3,000,000.

                                        @panz:

                                        @wcrowder:

                                        If your into torrents as heavy as you sound… These lists will not save you from the dreaded mail from your ISP or University. What they will help you with, and you will need it, if your into torrents this heavy; is help keep your computer clean and not become a BOT, which it probably already is...  :o You need to look into paying for a VPN service or something like that. There are several sites that deal with this, of course you will have to pay a little bit. Life is not free

                                        I forgot to mention that I'm using AirVPN and the event(s) that I want to filter out are generated by the AirVPN server (aka the Exit Node) :)</firewall>

                                        1 Reply Last reply Reply Quote 0
                                        • panzP
                                          panz
                                          last edited by

                                          @wcrowder:

                                          Try System->Advanced-> <firewall nat="">and increase entry [Firewall Maximum Table Entries] to something like 3,000,000.</firewall>

                                          It's already at 12,000,000 :)

                                          pfSense 2.3.2-RELEASE-p1 (amd64)
                                          motherboard: MSI C847MS-E33 Micro ATX (with Intel Celeron CPU 847 @ 1.10 GHz) ~ PSU: Corsair VS350 ~ RAM: Kingston KVR1333D3E9S 4096 MB 240-pin DIMM DDR3 SDRAM 1.5 volt ~ NIC: Intel EXPI9301CTBLK (LAN) ~ NIC: D-Link DFE-528TX (CAM) ~ Hard Disk: Western Digital WD10JFCX Red ~ Case: Cooler Master HAF XB ~ power consumption: 21 Watts.

                                          1 Reply Last reply Reply Quote 0
                                          • marcellocM
                                            marcelloc
                                            last edited by

                                            @panz:

                                            I can't load any list into pfBlocker that is bigger than 10 MB: it crashes with an out if memory error, even if I choose the Alias creation.

                                            Are you pasting it on pfbloker gui or linking it to a url?

                                            Treinamentos de Elite: http://sys-squad.com

                                            Help a community developer! ;D

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.