Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PfBlockerNG

    Scheduled Pinned Locked Moved pfBlockerNG
    1.2k Posts 210 Posters 1.8m Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      Supermule Banned
      last edited by

      ~~I cant for the world get the P.S alias going….

      Havent got a clue why. GRRRRRRRRRRRRRRRRRRR!!~~

      FFS….. I am stupid as a bat.... :D

      Wont tell you why...

      1 Reply Last reply Reply Quote 0
      • BBcan177B
        BBcan177 Moderator
        last edited by

        @nckwebtech:

        BBCan177 That was the problem the In and Outbound were not selected.  When I looked at the setting I did not realize I had to select one.
        They should be selected by default but they are not.

        Glad that its working for you now.. There is nothing there to indicate that its set to Default  :)

        "Experience is something you don't get until just after you need it."

        Website: http://pfBlockerNG.com
        Twitter: @BBcan177  #pfBlockerNG
        Reddit: https://www.reddit.com/r/pfBlockerNG/new/

        1 Reply Last reply Reply Quote 0
        • BBcan177B
          BBcan177 Moderator
          last edited by

          @Supermule:

          ~~I cant for the world get the P.S alias going….

          Havent got a clue why. GRRRRRRRRRRRRRRRRRRR!!~~

          FFS….. I am stupid as a bat.... :D

          Wont tell you why...

          LOL.. "common sense is not so common!!"

          "Experience is something you don't get until just after you need it."

          Website: http://pfBlockerNG.com
          Twitter: @BBcan177  #pfBlockerNG
          Reddit: https://www.reddit.com/r/pfBlockerNG/new/

          1 Reply Last reply Reply Quote 0
          • D
            doktornotor Banned
            last edited by

            @Supermule:

            FFS….. I am stupid as a bat.... :D
            Wont tell you why...

            1 Reply Last reply Reply Quote 0
            • S
              Supermule Banned
              last edited by

              HAHAHAHAHAHAHHAHA :D

              1 Reply Last reply Reply Quote 0
              • M
                Mr. Jingles
                last edited by

                Given the increase in traffic in this thread I thought it was released, but according to the package manager in the GUI it is not there yet; lots of hackers here then  ;D

                6 and a half billion people know that they are stupid, agressive, lower life forms.

                1 Reply Last reply Reply Quote 0
                • P
                  phil.davis
                  last edited by

                  @Mr.:

                  Given the increase in traffic in this thread I thought it was released, but according to the package manager in the GUI it is not there yet; lots of hackers here then  ;D

                  It is released and available on pfSense 2.2 only.

                  As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
                  If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

                  1 Reply Last reply Reply Quote 0
                  • M
                    McFuzz
                    last edited by

                    Apologies ahead of time if this was already mentioned in the thread - it's late, and I just spent a couple of hours restoring from a botched 2.1.5->2.2 upgrade :(

                    Anyway - I just did a clean install of 2.2 and used a backed up config.xml to restore all my settings. In 2.1.5, I had pfBlocker installed with a few lists and once 2.2 was installed, I noticed that pfBlocker was no-mo and instead, pfBlockerNG was available.

                    Unfortunately, most of the pfBlocker XML data was loaded but since there was no package available, it was all broken; pfBlockerNG thought pfBlocker was installed but after I manually cleaned up config.xml of any mention of the old package, it seems pfBlockerNG started working.

                    I did not wipe any rules/lists in config.xml as far as I can tell… I was hoping that the new pfBlockerNG package would automagically import everything... alas, that is not the case.

                    So my question is, any idea how to get pfBlockerNG to 'pick up' the old settings and just automagically work? There's a whole lot more options in the new package than there were before...

                    Thanks :)

                    1 Reply Last reply Reply Quote 0
                    • D
                      doktornotor Banned
                      last edited by

                      There is no way to import configuration from the old pfBlocker. And frankly don't think it's ever gonna happen.

                      1 Reply Last reply Reply Quote 0
                      • M
                        Mr. Jingles
                        last edited by

                        @phil.davis:

                        @Mr.:

                        Given the increase in traffic in this thread I thought it was released, but according to the package manager in the GUI it is not there yet; lots of hackers here then  ;D

                        It is released and available on pfSense 2.2 only.

                        WUT??

                        Not on 2.1.5?(??)

                        000.jpg
                        000.jpg_thumb

                        6 and a half billion people know that they are stupid, agressive, lower life forms.

                        1 Reply Last reply Reply Quote 0
                        • M
                          Mr. Jingles
                          last edited by

                          No, really, it's for 2.2 only?

                          I'm on 2.1.5, and plan to stay there for quite some time. I was looking forward to this package tremendelously, even back last year when BB tried to help me become a beta tester for it.

                          I'm a little bit like the attached pic now  :'(

                          Weilerbadmood.jpg
                          Weilerbadmood.jpg_thumb

                          6 and a half billion people know that they are stupid, agressive, lower life forms.

                          1 Reply Last reply Reply Quote 0
                          • D
                            darrenkdean
                            last edited by

                            Good Evening,

                            I am attempting to use the IP Lists from https://blocklist.sigmaprojects.org/, but each time it goes to update, I am receiving an error:

                            [ https://blocklist.sigmaprojects.org/api.cfc?method=getList&lists=anti-infringement ]
                            ** TERMINATED - Header contains Blank/International/Special or Spaces

                            [ https://blocklist.sigmaprojects.org/api.cfc?method=getList&lists=webexploit ]
                            ** TERMINATED - Header contains Blank/International/Special or Spaces

                            [ https://blocklist.sigmaprojects.org/api.cfc?method=getList&lists=dshield ]
                            ** TERMINATED - Header contains Blank/International/Special or Spaces

                            [ https://blocklist.sigmaprojects.org/api.cfc?method=getList&lists=spyware ]
                            ** TERMINATED - Header contains Blank/International/Special or Spaces

                            [ https://blocklist.sigmaprojects.org/api.cfc?method=getList&lists=drop ]
                            ** TERMINATED - Header contains Blank/International/Special or Spaces

                            [ https://blocklist.sigmaprojects.org/api.cfc?method=getList&lists=zeus ]
                            ** TERMINATED - Header contains Blank/International/Special or Spaces

                            [ https://blocklist.sigmaprojects.org/api.cfc?method=getList&lists=china ]
                            ** TERMINATED - Header contains Blank/International/Special or Spaces

                            [ https://blocklist.sigmaprojects.org/api.cfc?method=getList&lists=forumspam ]
                            ** TERMINATED - Header contains Blank/International/Special or Spaces

                            [ https://blocklist.sigmaprojects.org/api.cfc?method=getList&lists=pedophiles ]
                            ** TERMINATED - Header contains Blank/International/Special or Spaces

                            [ https://blocklist.sigmaprojects.org/api.cfc?method=getList&lists=northkorea ]
                            ** TERMINATED - Header contains Blank/International/Special or Spaces

                            [ https://blocklist.sigmaprojects.org/api.cfc?method=getList&lists=russia ]
                            ** TERMINATED - Header contains Blank/International/Special or Spaces

                            [ https://blocklist.sigmaprojects.org/api.cfc?method=getList&lists=atma ]
                            ** TERMINATED - Header contains Blank/International/Special or Spaces

                            [ https://blocklist.sigmaprojects.org/api.cfc?method=getList&lists=spammers ]
                            ** TERMINATED - Header contains Blank/International/Special or Spaces

                            Any thoughts or guidance that might have to help resolve this issue would be greatly appreciated.

                            Best-

                            1 Reply Last reply Reply Quote 0
                            • BBcan177B
                              BBcan177 Moderator
                              last edited by

                              @darrenkdean:

                              ** TERMINATED - Header contains Blank/International/Special or Spaces

                              In the IPv4 Tab, when you create the Alias, ensure that there are no Spaces, International or Special Characters in the Header Name field.

                              "Experience is something you don't get until just after you need it."

                              Website: http://pfBlockerNG.com
                              Twitter: @BBcan177  #pfBlockerNG
                              Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                              1 Reply Last reply Reply Quote 0
                              • D
                                darrenkdean
                                last edited by

                                @BBcan177:

                                @darrenkdean:

                                ** TERMINATED - Header contains Blank/International/Special or Spaces

                                In the IPv4 Tab, when you create the Alias, ensure that there are no Spaces, International or Special Characters in the Header Name field.

                                Thank you for the help.  I have updated the Alias with these instructions but still receive the same error.  The Header field is blank for each of the lists.  Does something needed to be added to the Header field to make it work?

                                Best-

                                1 Reply Last reply Reply Quote 0
                                • C
                                  Cino
                                  last edited by

                                  @darrenkdean:

                                  @BBcan177:

                                  @darrenkdean:

                                  ** TERMINATED - Header contains Blank/International/Special or Spaces

                                  In the IPv4 Tab, when you create the Alias, ensure that there are no Spaces, International or Special Characters in the Header Name field.

                                  Thank you for the help.  I have updated the Alias with these instructions but still receive the same error.  The Header field is blank for each of the lists.  Does something needed to be added to the Header field to make it work?

                                  Best-

                                  ** TERMINATED - Header contains Blank/International/Special or Spaces

                                  Enter a name for the header like: sigma-anti-infringement, sigma-webexploit, sigma-dshield

                                  
                                  'Header' : The 'Header' Field must be Unique, it will name the List File and it will be referenced in the pfBlockerNG Widget. Use a Unique Prefix per 'Alias Category' followed by a unique descriptor for each List.
                                  
                                  
                                  1 Reply Last reply Reply Quote 0
                                  • T
                                    Topper727
                                    last edited by

                                    Ok just to let everyone know that I tried his lists and found that same error. There is something wrong with fetching of list.  I can download gz lists if I use browser to get it.  It looks legit inside

                                    Example from file
                                    1.0.128.0/17
                                    1.0.192.0/18
                                    1.1.128.0/17
                                    1.2.128.0/17
                                    1.9.0.0/16
                                    1.20.128.0/17
                                    1.27.1.231/32
                                    1.27.100.88/32
                                    1.34.0.0/16
                                    1.36.71.108/32
                                    1.36.79.146/32
                                    1.48.0.0/16
                                    1.50.0.0/16
                                    1.54.224.0/20
                                    1.56.44.42/32
                                    1.56.122.145/32
                                    1.56.145.114/32

                                    I do not get his Header problem he sees but I get

                                    [ Sigantiinfringement ] Downloading New File

                                    [ pfB_sigmaprojects Sigantiinfringement ] Download FAIL [ 02/06/15 22:00:47 ]

                                    [ Sigwebexploit ] Downloading New File

                                    [ pfB_sigmaprojects Sigwebexploit ] Download FAIL [ 02/06/15 22:00:48 ]

                                    [ Sigdshield ] Downloading New File

                                    [ pfB_sigmaprojects Sigdshield ] Download FAIL [ 02/06/15 22:00:49 ]

                                    I took the link and had Free Download manager try to get it and that worked.  FDM got the file no problem.

                                    ![screencapture-192-168-1-1-pkg_edit-php (1).png](/public/imported_attachments/1/screencapture-192-168-1-1-pkg_edit-php (1).png)
                                    ![sigma list.png](/public/imported_attachments/1/sigma list.png)
                                    ![screencapture-192-168-1-1-pkg_edit-php (1).png_thumb](/public/imported_attachments/1/screencapture-192-168-1-1-pkg_edit-php (1).png_thumb)
                                    ![sigma list.png_thumb](/public/imported_attachments/1/sigma list.png_thumb)

                                    Dell 2950 g3 server
                                    Intel(R) Xeon(R) CPU E5430 @ 2.66GHz
                                    Current: 2000 MHz, Max: 2667 MHz
                                    8 CPUs: 2 package(s) x 4 core(s)
                                    8152 MiB and 600meg 10k drive
                                    Pfsense 2.4 .. Hoping to get the phpvirtualbox going again.

                                    1 Reply Last reply Reply Quote 0
                                    • BBcan177B
                                      BBcan177 Moderator
                                      last edited by

                                      If the lists are gz format and in CIDR format, you need to select "gz_2".

                                      However, these are not the best lists to use. It's best to use lists from the original provider.

                                      "Experience is something you don't get until just after you need it."

                                      Website: http://pfBlockerNG.com
                                      Twitter: @BBcan177  #pfBlockerNG
                                      Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                                      1 Reply Last reply Reply Quote 0
                                      • T
                                        Topper727
                                        last edited by

                                        BBcan you the man.  That fixes them thanks.  GZ_2 format.  Maybe next update it can be smarter and know what to choose :p

                                        Dell 2950 g3 server
                                        Intel(R) Xeon(R) CPU E5430 @ 2.66GHz
                                        Current: 2000 MHz, Max: 2667 MHz
                                        8 CPUs: 2 package(s) x 4 core(s)
                                        8152 MiB and 600meg 10k drive
                                        Pfsense 2.4 .. Hoping to get the phpvirtualbox going again.

                                        1 Reply Last reply Reply Quote 0
                                        • M
                                          McFuzz
                                          last edited by

                                          Hi all,

                                          So I got around to mimicking the setup i had in pfBlocker; I added all the lists and configured everything based on the way things used to be. However, my status widget just looks like this after a few hours:

                                          With the old setup, I'd be able to see all the blocked packets. In pfBlocker, I had it set as deny inbound and WAN as both inbound/outbound interface…

                                          Obviously the lists have loaded fine and firewall rules have been made as well but... what am I missing here?

                                          Thanks!

                                          1 Reply Last reply Reply Quote 0
                                          • T
                                            Topper727
                                            last edited by

                                            go to the update tab and view log .. send it here

                                            Oh and send your list links here also please so I can try and see if that is problem too

                                            Dell 2950 g3 server
                                            Intel(R) Xeon(R) CPU E5430 @ 2.66GHz
                                            Current: 2000 MHz, Max: 2667 MHz
                                            8 CPUs: 2 package(s) x 4 core(s)
                                            8152 MiB and 600meg 10k drive
                                            Pfsense 2.4 .. Hoping to get the phpvirtualbox going again.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.