Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PfBlockerNG

    pfBlockerNG
    210
    1.2k
    1.8m
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      Topper727
      last edited by

      Hit the thanks button for me please.  Hope that works for you

      Dell 2950 g3 server
      Intel(R) Xeon(R) CPU E5430 @ 2.66GHz
      Current: 2000 MHz, Max: 2667 MHz
      8 CPUs: 2 package(s) x 4 core(s)
      8152 MiB and 600meg 10k drive
      Pfsense 2.4 .. Hoping to get the phpvirtualbox going again.

      1 Reply Last reply Reply Quote 0
      • M
        McFuzz
        last edited by

        Just out of curiosity - there shouldn't be anything related to configuration other than the lists that could affect the behavior, could there?

        For what its worth - this is how mine is configured:

        1 Reply Last reply Reply Quote 0
        • D
          doktornotor Banned
          last edited by

          @McFuzz:

          For what its worth - this is how mine is configured:

          On an unrelated note: WAN is not an outbound interface.

          1 Reply Last reply Reply Quote 0
          • T
            Topper727
            last edited by

            @McFuzz:

            Just out of curiosity - there shouldn't be anything related to configuration other than the lists that could affect the behavior, could there?

            For what its worth - this is how mine is configured:

            Except the LAN should be the outbound normally

            Looks ok to me, maybe tomorrow about 11pm EST I can help with teamviewer if you don't have right by then

            Dell 2950 g3 server
            Intel(R) Xeon(R) CPU E5430 @ 2.66GHz
            Current: 2000 MHz, Max: 2667 MHz
            8 CPUs: 2 package(s) x 4 core(s)
            8152 MiB and 600meg 10k drive
            Pfsense 2.4 .. Hoping to get the phpvirtualbox going again.

            1 Reply Last reply Reply Quote 0
            • M
              McFuzz
              last edited by

              Whoops - I must have accidentally toggled it. Fixed right now; will monitor.

              1 Reply Last reply Reply Quote 0
              • BBcan177B
                BBcan177 Moderator
                last edited by

                Hi McFuzz,

                These are IBlock lists. And they are in a range format. You need to select "gz" format. There is a chart below the URL entry section to indicate what each "Format" is for.

                I think the issue is with the "Ads" list. I will be doing some debugging today but try to toggle that list "off" and change all IBlock to "gz" then run a "Force Reload".

                If you see a "-" in the widget there are issues with pfctl and it's not going to block anything.

                "Experience is something you don't get until just after you need it."

                Website: http://pfBlockerNG.com
                Twitter: @BBcan177  #pfBlockerNG
                Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                1 Reply Last reply Reply Quote 0
                • BBcan177B
                  BBcan177 Moderator
                  last edited by

                  I would also recommend removing the Bogon list and using pfSense built-in Bogon settings in the "Advanced Tab" of the GUI.

                  "Experience is something you don't get until just after you need it."

                  Website: http://pfBlockerNG.com
                  Twitter: @BBcan177  #pfBlockerNG
                  Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                  1 Reply Last reply Reply Quote 0
                  • M
                    mzarrugh
                    last edited by

                    Is it possible to use easy list (https://easylist-downloads.adblockplus.org/easylist.txt) to block ads? I tried putting it in IPv4 Format: Text, List action Deny Inbound, but it doesn't seem to work. Also, When I do Force update it says Download FAIL.

                    1 Reply Last reply Reply Quote 0
                    • BBcan177B
                      BBcan177 Moderator
                      last edited by

                      @McFuzz:

                      Obviously the lists have loaded fine and firewall rules have been made as well but… what am I missing here?

                      Hi McFuzz,

                      Seems the issue is with IBlock posting the following IP for Blocking

                      # List distributed by iblocklist.com

                      doclix.com:0.0.0.0-0.0.0.0

                      I have code to remove "0.0.0.0", but as this was in a range format, it was being converted to "0.0.0.0**/32**", so the existing code was removing the "0.0.0.0" but leaving behind  "/32". This would cause pfctl to not load properly.

                      I see that IBlock has removed that entry in their Ads List. It should never have been there in the first place.  >:(

                      I will post a fix to resolve this potential Issue.

                      You can manually delete the old Ads Files.

                      rm /var/db/pfblockerng/original/Ads*.* 
                      

                      then Re-enable the "Ads" List and then run a "Force Reload".

                      "Experience is something you don't get until just after you need it."

                      Website: http://pfBlockerNG.com
                      Twitter: @BBcan177  #pfBlockerNG
                      Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                      1 Reply Last reply Reply Quote 0
                      • BBcan177B
                        BBcan177 Moderator
                        last edited by

                        @mzarrugh:

                        Is it possible to use easy list

                        Not currently. That is a Domain Blocklist. pfBlockerNG is an IP Based Blocking solution. pfBNG v2.0 will have this functionality.

                        "Experience is something you don't get until just after you need it."

                        Website: http://pfBlockerNG.com
                        Twitter: @BBcan177  #pfBlockerNG
                        Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                        1 Reply Last reply Reply Quote 0
                        • S
                          samham
                          last edited by

                          I have configured iBlock list under IPv4 to block in both directions I see the logs showing blocking however no updates for the widget, please see attached

                          pfNG.PNG
                          pfNG2.PNG
                          pfNG.PNG_thumb
                          pfNG2.PNG_thumb

                          1 Reply Last reply Reply Quote 0
                          • BBcan177B
                            BBcan177 Moderator
                            last edited by

                            @samham:

                            I have configured iBlock list under IPv4 to block in both directions I see the logs showing blocking however no updates for the widget, please see attached

                            When you look at the System Logs: Firewall Logs in the GUI. Do these alerts have pfB_ in the Rule Column?

                            "Experience is something you don't get until just after you need it."

                            Website: http://pfBlockerNG.com
                            Twitter: @BBcan177  #pfBlockerNG
                            Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                            1 Reply Last reply Reply Quote 0
                            • S
                              samham
                              last edited by

                              no I don't but i see the IP being blocked in both the pfblockerNG:Alerts and the Firewall Log

                              log1.PNG
                              log2.PNG
                              log1.PNG_thumb
                              log2.PNG_thumb

                              1 Reply Last reply Reply Quote 0
                              • BBcan177B
                                BBcan177 Moderator
                                last edited by

                                Clear the Firewall Log and start fresh. When you make Rule Changes, they can go out of Sync.

                                "Experience is something you don't get until just after you need it."

                                Website: http://pfBlockerNG.com
                                Twitter: @BBcan177  #pfBlockerNG
                                Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                                1 Reply Last reply Reply Quote 0
                                • BBcan177B
                                  BBcan177 Moderator
                                  last edited by

                                  @samham:

                                  how do you show Rule column under system:firewall log?

                                  System Logs: Settings:

                                  Filter Descriptions and select "Display as Column"

                                  Also make sure the logs are in reverse. First Checkbox at the top of the Settings page.

                                  "Experience is something you don't get until just after you need it."

                                  Website: http://pfBlockerNG.com
                                  Twitter: @BBcan177  #pfBlockerNG
                                  Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                                  1 Reply Last reply Reply Quote 0
                                  • S
                                    samham
                                    last edited by

                                    I still don't see the pfB_in under rules

                                    1 Reply Last reply Reply Quote 0
                                    • S
                                      samham
                                      last edited by

                                      OK I see it now, but still no update in widget

                                      pfNG3.PNG
                                      pfNG3.PNG_thumb

                                      1 Reply Last reply Reply Quote 0
                                      • BBcan177B
                                        BBcan177 Moderator
                                        last edited by

                                        @samham:

                                        OK I see it now, but still no update in widget

                                        Did you manually edit the pfBlockerNG Descriptions in the rules? the rules are auto-generated and need to start with "pfB_"

                                        You should not need to edit the Descriptions as this will affect how the Widget reads the log files.

                                        Edit:
                                        If you uses "Alias" Type rules: make sure the Rule Description starts with  "pfb_" Lowercase..

                                        There is a whole tech section in the IPv4/Alias tab, to describe how to do this.

                                        "Experience is something you don't get until just after you need it."

                                        Website: http://pfBlockerNG.com
                                        Twitter: @BBcan177  #pfBlockerNG
                                        Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                                        1 Reply Last reply Reply Quote 0
                                        • S
                                          samham
                                          last edited by

                                          not for the auto rule under the WAN interface, but for the manually added rule under the LAN I did add a description as by default it is blank.

                                          update…

                                          I deleted the manual rule and created an auto rule, now it works fine. thanks BBcan177 for a great package, what is the account to donate?

                                          1 Reply Last reply Reply Quote 0
                                          • D
                                            doktornotor Banned
                                            last edited by

                                            Manual rules are just fine as long as you RTFM and set the descriptions as required. The widget lacks paranormal skills, cannot match the hits unless the rules description is set properly.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.