PfBlockerNG v2.0 w/DNSBL

pfBasic

awesome, i got it working as its meant to be, thank you for sticking with my ignorant line of questioning!

One last question, how does the "root server" resolve the DNS lookups? as in what tells my pfsense box the ip address that google.com resolves to?

RonpfS

https://en.wikipedia.org/wiki/Domain_Name_System
https://en.wikipedia.org/wiki/Root_name_server

BBcan177

A PR has been merged for pfBlockerNG. v2.1.1_6
https://github.com/pfsense/FreeBSD-ports/pull/253

Fixes:

EasyList has recently changed the format of the feed. DNSBL parser has been updated.
Fix XMLRPC Sync setting that handles the Sync of the General settings to remote hosts.
Fix DNSBL Certificate creation for pfSense 2.4

mk6032

@BBcan177:

A PR has been merged for pfBlockerNG. v2.1.1_6
https://github.com/pfsense/FreeBSD-ports/pull/253

Fixes:

EasyList has recently changed the format of the feed. DNSBL parser has been updated.

Fix XMLRPC Sync setting that handles the Sync of the General settings to remote hosts.

Fix DNSBL Certificate creation for pfSense 2.4

Hello, thanks for all your work on this. I just wanted to report that I'm seeing the following in system -> pkg manager -> installed, even after reinstalling the package.

http://imgur.com/a/I3mep

doktornotor

@mk6032:

I just wanted to report that I'm seeing the following in system -> pkg manager -> installed, even after reinstalling the package.

http://imgur.com/a/I3mep

Yes. And the point of the report is exactly what?

mk6032

@doktornotor:

@mk6032:

I just wanted to report that I'm seeing the following in system -> pkg manager -> installed, even after reinstalling the package.

http://imgur.com/a/I3mep

Yes. And the point of the report is exactly what?

Please review the linked image. There are two points :

1. "Package is configured but not (fully) installed" (even after reinstallation)
2. "Newer version available" (without the update option)

Regards,
Matt

RonpfS

@mk6032:

Please review the linked image. There are two points :

1. "Package is configured but not (fully) installed" (even after reinstallation)
2. "Newer version available" (without the update option)

Regards,
Matt

That is the Legend for the Package Manager ::)

So now look a the pfBlockerNG line and interpreting the legend the status of the package is "Current"

mk6032

@RonpfS:

That is the Legend for the Package Manager ::)

So now look a the pfBlockerNG line and interpreting the legend the status of the package is "Current"

Ah, my bad! The lack of a separator there as opposed to the ones above it is a bit confusing ( http://imgur.com/a/lwSFx ).

Regards,
Matt

doktornotor

@mk6032:

@RonpfS:

That is the Legend for the Package Manager ::)

So now look a the pfBlockerNG line and interpreting the legend the status of the package is "Current"

Ah, my bad! The lack of a separator there as opposed to the ones above it is a bit confusing ( http://imgur.com/a/lwSFx ).

Regards,
Matt

LOL, ok… https://redmine.pfsense.org/issues/7203

RonpfS

@doktornotor:

LOL, ok… https://redmine.pfsense.org/issues/7203

Maybe just add "Legend : "

doktornotor

@RonpfS:

@doktornotor:

LOL, ok… https://redmine.pfsense.org/issues/7203

Maybe just add "Legend : "

Yeah I tried and that looked even worse than now. Leaving this to someone else.

Redyr

Hello,

Regarding Adaway,

https://adaway.org/hosts.txt

Although the list is downloaded:

[ Adaway ] Downloading update .. 200 OK. completed ..

I got this error:

[ pfB_Adaway Adaway ] List Error ]

Please advise

BBcan177

I assume that Adaway is also the name of the Alias?

Do you have anything in the custom list at the bottom of this alias? I think that's the part that's not parsing properly. Anything in a custom list must be formatted properly.

Redyr

@BBcan177:

I assume that Adaway is also the name of the Alias?

Do you have anything in the custom list at the bottom of this alias? I think that's the part that's not parsing properly. Anything in a custom list must be formatted properly.

The name of the alias is Adaway, and I don't have anything in the custom list.

I've changed the name of the alias, and the label like this:

Adaway_list ] Downloading update .. 200 OK. completed ..
[ pfB_Adaway1 Adaway_list ] List Error ]

BBcan177

It looks like you added this list to the IPv4 tab when it's a domain based list and should only be used in the DNSBL tab.

Redyr

@BBcan177:

It looks like you added this list to the IPv4 tab when it's a domain based list and should only be used in the DNSBL tab.

I removed it from IPV4, sorry to bother you with this.

Thank you

yodaphone

@BBcan177:

Here are more DNSBL Feeds that can be used in pfBlockerNG.
(Copy and paste URLS as plain text)

Create a new alias for these.
These are not necessarily ADvert domains. So I named mine "Malicious"

malc0de
https://malc0de.com/bl/BOOT

I get this error for malc0de. all other lists are fine

[ DNSBL_Malicious - malc0de ] Download FAIL [ 02/21/17 01:21:47 ]
Firewall and/or IDS are not blocking download.

Set up exactly the way you have described.

I'm on 2.3.3 RC

BBcan177

@yodaphone:

I get this error for malc0de. all other lists are fine

[ DNSBL_Malicious - malc0de ] Download FAIL [ 02/21/17 01:21:47 ]
Firewall and/or IDS are not blocking download.

Not having any issues with that feed… Try to

ping malc0de.com

and see if it responds… Check the Alerts Tab to see if any alerts get reported... Could be Snort/Suricata, or another Firewall rule....

HeatmiserNYC

Hey BBCAN,
Is there a way to get Reek's anti-adblocking list to work under Pfblocker? This would be extremely convenient.

My apologies if this has been asked a trillion times before….

BBcan177

@HeatmiserNYC:

Is there a way to get Reek's anti-adblocking list to work under Pfblocker? This would be extremely convenient

Unfortunately not. DNSBL can't manipulate the browser except for sinkholing the DNS request.