• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

PfBlockerNG

pfBlockerNG
210
1.2k
1.8m
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • F
    Firemedic46
    last edited by Feb 2, 2015, 10:19 PM

    Noticed pfBlockerng is not showing up in the Dashboard services status Widgets. Not sure how to reload it after modification.

    Thanks

    http://www.speedtest.net/my-result/6030868890

    1 Reply Last reply Reply Quote 0
    • D
      doktornotor Banned
      last edited by Feb 2, 2015, 10:20 PM

      It's not a running service, no business in there.

      1 Reply Last reply Reply Quote 0
      • B
        BBcan177 Moderator
        last edited by Feb 2, 2015, 10:25 PM

        @Firemedic46:

        Noticed pfBlockerng is not showing up in the Dashboard services status Widget.

        pfBlockerNG does not have a service as doktornotor indicated. So it will not show in the services menu. But when pfBlockerNG is enabled, you will see at the top left corner of the pfBNG widget, a similar Service Status Icon showing that pfBNG is "Enabled"

        "Experience is something you don't get until just after you need it."

        Website: http://pfBlockerNG.com
        Twitter: @BBcan177  #pfBlockerNG
        Reddit: https://www.reddit.com/r/pfBlockerNG/new/

        1 Reply Last reply Reply Quote 0
        • H
          Hugovsky
          last edited by Feb 2, 2015, 10:48 PM

          It seems I can't avoid blocks from showing up in system logs->firewall, even with "Global Enable Logging" unchecked. Is it just me?

          1 Reply Last reply Reply Quote 0
          • D
            doktornotor Banned
            last edited by Feb 2, 2015, 10:57 PM

            You have individual settings per each block list.

            1 Reply Last reply Reply Quote 0
            • H
              Hugovsky
              last edited by Feb 2, 2015, 11:00 PM

              ;) you're the man…. thank you.

              1 Reply Last reply Reply Quote 0
              • W
                wbennett77
                last edited by Feb 3, 2015, 12:03 AM

                Just did a very smooth reinstall/upgrade to 1.01. Thanks BBcan177 for an amazing package and thanks for all the support.

                Cheers!

                Dell Optiplex 390 Pfsense 2.2 / Asus AC56U Wireless AP / Asus Switch

                1 Reply Last reply Reply Quote 0
                • A
                  asterix
                  last edited by Feb 3, 2015, 12:06 AM

                  Not seeing any aliases being created after selecting various country blocks. Nor do I see them on the dashboard widget. Its empty.

                  1 Reply Last reply Reply Quote 0
                  • D
                    dennypage
                    last edited by Feb 3, 2015, 12:08 AM

                    Did you enable pfBlockerNG in the General tab? Did you force an update?

                    @Asterix:

                    Not seeing any aliases being created after selecting various country blocks. Nor do I see them on the dashboard widget. Its empty.

                    1 Reply Last reply Reply Quote 0
                    • A
                      asterix
                      last edited by Feb 3, 2015, 12:16 AM Feb 3, 2015, 12:12 AM

                      Yup..

                      EDIT: A reboot fixed it.

                      Quick question…..

                      Do u enable the floating rules options on the general tab?

                      1 Reply Last reply Reply Quote 0
                      • B
                        BBcan177 Moderator
                        last edited by Feb 3, 2015, 12:14 AM

                        After seeing some users installation of pfBNG, I would like to suggest the following:

                        1. Enable "Keep Settings" in the General Tab. On any re-install you will lose all settings without it.

                        2. With the new "Alerts" Tab, you don't need to break-out each List into a single Alias. You can create an "Alias" Category, say IBlock and put most of the IBlock lists into one Alias. You can create another Alias for "Mail Servers" etc.. The Alerts tab will tell you which list was responsible for the Blocked event.

                        3. If you create an "Alias Permit/Deny/Match/Native", name the Alias  pfb_   All lowercase. The widget is designed to pick this Prefix in the Rules so that it can be displayed with the other Auto rules that are prefixed  pfB_. For any Alias only type list, never use  pfB_ as a prefix. The package will remove it at each Cron event.

                        4. Match can be used if you want to Monitor a group of IPs, this will just log the activity without Blocking. These Match rules will populate in the Floating Tab. You can use a URL or post IPs in the "Custom Box" provided in each Alias.

                        5. "Alias Native" are lists that do not undergo any De-Duplication/Reputation, this can be used for Lists like the IBlock Anti-Infringement or when you want to Block Facebook for example.

                        6. With the new "html" format, you can Deny, Permit or Match sites like Twitter, Facebook for example. You can use Hurricane Electric to pull the IPs that are part of these networks. You would also need to create a list for IPv6 if you use that in your network. Again use the "Alias Native" for these types of lists if you want to Block them. For Permit or Match, you can use the Auto-Type Rule Settings.

                        http://bgp.he.net/search?search%5Bsearch%5D=twitter&commit=Search
                            http://bgp.he.net/search?search%5Bsearch%5D=facebook&commit=Search
                            http://bgp.he.net/search?search%5Bsearch%5D=spotify&commit=Search
                            http://bgp.he.net/search?search%5Bsearch%5D=dropbox&commit=Search

                        1. And as always no one reads the tech notes on each setting. So I advise you to read each one to familiarize yourself with each function.

                        "Experience is something you don't get until just after you need it."

                        Website: http://pfBlockerNG.com
                        Twitter: @BBcan177  #pfBlockerNG
                        Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                        1 Reply Last reply Reply Quote 0
                        • D
                          dennypage
                          last edited by Feb 3, 2015, 12:15 AM

                          And what List Action did you select?

                          1 Reply Last reply Reply Quote 0
                          • B
                            BBcan177 Moderator
                            last edited by Feb 3, 2015, 12:19 AM Feb 3, 2015, 12:16 AM

                            @dennypage:

                            Did you enable pfBlockerNG in the General tab? Did you force an update
                            @Asterix:

                            Not seeing any aliases being created after selecting various country blocks. Nor do I see them on the dashboard widget. Its empty.

                            Follow the pfblockerng.log. It will tell you error events that can help diagnose…

                            Two points to check

                            1. Each alias needs to have a defined : List Action
                            2. Ensure that you have a "header name" for each List/URL

                            "Experience is something you don't get until just after you need it."

                            Website: http://pfBlockerNG.com
                            Twitter: @BBcan177  #pfBlockerNG
                            Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                            1 Reply Last reply Reply Quote 0
                            • A
                              asterix
                              last edited by Feb 3, 2015, 12:24 AM

                              I edited my previous post as a reboot fixed it.

                              Wanted to check if u enable the floating rules options on the general tab?

                              1 Reply Last reply Reply Quote 0
                              • B
                                BBcan177 Moderator
                                last edited by Feb 3, 2015, 12:26 AM

                                @Asterix:

                                I edited my previous post as a reboot fixed it.

                                Wanted to check if u enable the floating rules options on the general tab?

                                The choice is there to run Rules on each interface or to set them in the "Floating Tab"… The Choice is yours to make... There are threads that give some more advice on that...

                                So yes, if you want to enable "Floating Rules" select the option in the General Tab.

                                https://forum.pfsense.org/index.php?topic=78062.0

                                "Experience is something you don't get until just after you need it."

                                Website: http://pfBlockerNG.com
                                Twitter: @BBcan177  #pfBlockerNG
                                Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                                1 Reply Last reply Reply Quote 0
                                • J
                                  justsomeone
                                  last edited by Feb 3, 2015, 12:30 AM

                                  woot, it's official!

                                  "Bad shit happens to drunk people."

                                  1 Reply Last reply Reply Quote 0
                                  • W
                                    wcrowder
                                    last edited by Feb 3, 2015, 12:40 AM Feb 3, 2015, 12:31 AM

                                    @BBcan177:

                                    After seeing some users installation of pfBNG, I would like to suggest the following:

                                    1. Enable "Keep Settings" in the General Tab. On any re-install you will lose all settings without it.

                                    2. With the new "Alerts" Tab, you don't need to break-out each List into a single Alias. You can create an "Alias" Category, say IBlock and put most of the IBlock lists into one Alias. You can create another Alias for "Mail Servers" etc.. The Alerts tab will tell you which list was responsible for the Blocked event.

                                    3. And as always no one reads the tech notes on each setting. So I advise you to read each one to familiarize yourself with each function.

                                    Like This:

                                    Image1.JPG
                                    Image2.JPG
                                    Image3.JPG
                                    Image1.JPG_thumb
                                    Image2.JPG_thumb
                                    Image3.JPG_thumb

                                    1 Reply Last reply Reply Quote 0
                                    • C
                                      Cino
                                      last edited by Feb 3, 2015, 12:41 AM

                                      @Asterix:

                                      Wanted to check if u enable the floating rules options on the general tab?

                                      Depends on how you want your system setup. I have it enabled using rule order pfSense Pass/Match | pgB_Pass/Match | pfB_Block/Reject..

                                      1 Reply Last reply Reply Quote 0
                                      • J
                                        JasonJoel
                                        last edited by Feb 3, 2015, 2:22 AM

                                        My lists were all showing 0 entries after update… But after the last CRON they are all showing again. Weird as I force updated many times and it didn't populate. Not sure what happened, but ignore this post. :)

                                        1 Reply Last reply Reply Quote 0
                                        • B
                                          BBcan177 Moderator
                                          last edited by Feb 3, 2015, 2:26 AM

                                          Can you run the following command followed by a "Force Update"

                                          /usr/local/bin/php /usr/local/www/pfblockerng/pfblockerng.php dc

                                          "Experience is something you don't get until just after you need it."

                                          Website: http://pfBlockerNG.com
                                          Twitter: @BBcan177  #pfBlockerNG
                                          Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                                          1 Reply Last reply Reply Quote 0
                                          146 out of 1196
                                          • First post
                                            146/1196
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.