Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PfBlocker

    pfSense Packages
    143
    896
    1.3m
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      Supermule Banned
      last edited by

      Is MArcello still developing this?

      @digdug3:

      Just wait for a pfBlocker update… ::)

      1 Reply Last reply Reply Quote 0
      • W
        wcrowder
        last edited by

        It is being very actively forked, we will just have to wait for an announcement from the author doing the update… Or, you could read this thread more carefully.  ;D Did you read the thread I posted to you Panz?  :-*

        @Supermule:

        Is MArcello still developing this?

        @digdug3:

        Just wait for a pfBlocker update… ::)

        1 Reply Last reply Reply Quote 0
        • S
          Supermule Banned
          last edited by

          Thanks! We need forks :)

          1 Reply Last reply Reply Quote 0
          • W
            wcrowder
            last edited by

            <shaking head="">:-\ and thinking out loud… In the 30yrs I've done this every good Forum has a Troll.

            @Supermule:

            Thanks! We need forks :)</shaking>

            1 Reply Last reply Reply Quote 0
            • S
              Supermule Banned
              last edited by

              And youre doing it better than ANY out there ;)

              @wcrowder:

              <shaking head="">:-\ and thinking out loud… In the 30yrs I've done this every good Forum has a Troll.

              @Supermule:

              Thanks! We need forks :)</shaking>

              1 Reply Last reply Reply Quote 0
              • S
                Supermule Banned
                last edited by

                Wasnt me…dont use that at all

                1 Reply Last reply Reply Quote 0
                • W
                  wcrowder
                  last edited by

                  Neither do I…

                  @Supermule:

                  Wasnt me…dont use that at all

                  1 Reply Last reply Reply Quote 0
                  • F
                    f34rinc
                    last edited by

                    I really like the idea of blocking entire countries that my network has no business connecting to and put together a script to update pfBlockers country CIDR lists with the lists available from IPdeny.com

                    Edit - The script didn't work as intended and has been taken down

                    The download is at the bottom of http://legoclan.com/pfsense/  all feedback is welcome

                    1 Reply Last reply Reply Quote 0
                    • S
                      simby
                      last edited by

                      Hi!

                      How can i fix this on PF 2.2 BETA?

                      Crash report begins.  Anonymous machine information:

                      amd64
                      10.1-PRERELEASE
                      FreeBSD 10.1-PRERELEASE #28 30e366f(HEAD)-dirty: Fri Sep 19 23:30:48 CDT 2014    root@pf22-amd64-snap:/usr/obj.amd64/usr/pfSensesrc/src/sys/pfSense_SMP.10

                      Crash report details:

                      PHP Errors:
                      in /usr/local/pkg/pfblocker.inc on line 256

                      1 Reply Last reply Reply Quote 0
                      • BBcan177B
                        BBcan177 Moderator
                        last edited by

                        @f34rinc:

                        I really like the idea of blocking entire countries that my network has no business connecting to and put together a script to update pfBlockers country CIDR lists with the lists available from IPdeny.com

                        The download is at the bottom of http://legoclan.com/pfsense/  all feedback is welcome

                        Hi f34rinc,

                        This will update the ISO files for pfBlocker but it doesn't update the XML Continent Files (ie - Africa) with the changes made to the Country Names. So there could be some inconsistencies.

                        There are files named

                        Africa_cidr.txt that have this type of header:

                        Continent: Africa

                        Country: Reunion

                        ISO Code: RE

                        Total Networks: 245

                        These files are used by this command to rebuild the XML files based upon the 6 Continent Files.

                        /usr/local/bin/php /usr/local/www/pfblocker.php uc

                        "Experience is something you don't get until just after you need it."

                        Website: http://pfBlockerNG.com
                        Twitter: @BBcan177  #pfBlockerNG
                        Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                        1 Reply Last reply Reply Quote 0
                        • BBcan177B
                          BBcan177 Moderator
                          last edited by

                          @simby:

                          Hi!

                          How can i fix this on PF 2.2 BETA?

                          Crash report begins.  Anonymous machine information:

                          amd64
                          10.1-PRERELEASE
                          FreeBSD 10.1-PRERELEASE #28 30e366f(HEAD)-dirty: Fri Sep 19 23:30:48 CDT 2014    root@pf22-amd64-snap:/usr/obj.amd64/usr/pfSensesrc/src/sys/pfSense_SMP.10

                          Crash report details:

                          PHP Errors:
                          in /usr/local/pkg/pfblocker.inc on line 256

                          This error doesn't seem to be related to Country Blocking. Maybe its one of your Lists that is failing? Which lists are you using?

                          "Experience is something you don't get until just after you need it."

                          Website: http://pfBlockerNG.com
                          Twitter: @BBcan177  #pfBlockerNG
                          Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                          1 Reply Last reply Reply Quote 0
                          • F
                            f34rinc
                            last edited by

                            Thank you BBcan177 I don't believe I have the skill set to accomplish this

                            Edit - I took the country list of top spammers from http://www.projecthoneypot.org/spam_server_top_countries.php and made a script to make my own replacement for the pfBlocker top spammers list.  Please use the link from my previous post above.

                            1 Reply Last reply Reply Quote 0
                            • W
                              wbennett77
                              last edited by

                              Hi there,
                              Total newbie to Pfsense here. I have installed Pfblocker but and added a few countries to block. It is enabled, logging enabled and "deny inbound" is selected for the countries I chose. When I look at the status i see that the status is a red arrow (down). Am I missing something?
                              Thanks

                              Dell Optiplex 390 Pfsense 2.2 / Asus AC56U Wireless AP / Asus Switch

                              1 Reply Last reply Reply Quote 0
                              • BBcan177B
                                BBcan177 Moderator
                                last edited by

                                PfBlocker will not add an Inbound Rule if there are no other rules on the WAN. So you just need to create a dummy rule and it will populate the Auto Rules.

                                "Experience is something you don't get until just after you need it."

                                Website: http://pfBlockerNG.com
                                Twitter: @BBcan177  #pfBlockerNG
                                Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                                1 Reply Last reply Reply Quote 0
                                • W
                                  wbennett77
                                  last edited by

                                  @BBcan177:

                                  PfBlocker will not add an Inbound Rule if there are no other rules on the WAN. So you just need to create a dummy rule and it will populate the Auto Rules.

                                  Being a eager to learn newbie, how and where would I create a dummy rule. Sorry if this has been asked before.

                                  Update: Got it working. Dummy rule created on the wan did the trick. I disabled the rule after pfblocker started working and all is still good.

                                  Cheers!

                                  Dell Optiplex 390 Pfsense 2.2 / Asus AC56U Wireless AP / Asus Switch

                                  1 Reply Last reply Reply Quote 0
                                  • BBcan177B
                                    BBcan177 Moderator
                                    last edited by

                                    You need to goto the Firewall rules Tab and create a dummy Block Rule on the Wan interface. If you hover over the pfBlocker Inbound rule that was created. You can use one of those IPs to copy/paste into the dummy rule.

                                    If you edit the inbound rule. It will give you an idea on how to configure the new WAN Block Rule.

                                    "Experience is something you don't get until just after you need it."

                                    Website: http://pfBlockerNG.com
                                    Twitter: @BBcan177  #pfBlockerNG
                                    Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                                    1 Reply Last reply Reply Quote 0
                                    • W
                                      wbennett77
                                      last edited by

                                      @BBcan177:

                                      You need to goto the Firewall rules Tab and create a dummy Block Rule on the Wan interface. If you hover over the pfBlocker Inbound rule that was created. You can use one of those IPs to copy/paste into the dummy rule.

                                      If you edit the inbound rule. It will give you an idea on how to configure the new WAN Block Rule.

                                      Once pfblocker is working can I delete the dummy rule I created. Also, how does the list of ip addresses get updated?

                                      Thanks!

                                      Dell Optiplex 390 Pfsense 2.2 / Asus AC56U Wireless AP / Asus Switch

                                      1 Reply Last reply Reply Quote 0
                                      • D
                                        dstroot
                                        last edited by

                                        @wcrowder:

                                        It is being very actively forked, we will just have to wait for an announcement from the author doing the update… Or, you could read this thread more carefully.  ;D Did you read the thread I posted to you Panz?  :-*

                                        This is a 58 page thread and the link is a long thread also - why not not just enlighten us? ;D

                                        Cheers!

                                        1 Reply Last reply Reply Quote 0
                                        • stephenw10S
                                          stephenw10 Netgate Administrator
                                          last edited by

                                          Have a look here

                                          https://forum.pfsense.org/index.php?topic=42543.msg439552#msg439552

                                          1 Reply Last reply Reply Quote 0
                                          • D
                                            dstroot
                                            last edited by

                                            Aha - thanks!  I found an older version of the work here: https://github.com/BBcan177/pf-IPrep

                                            Hope this is progressing well!  I'd love to just install and configure a package rather all the manual steps…  ;D

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.