Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PfBlockerNG v2.0 w/DNSBL

    Scheduled Pinned Locked Moved pfBlockerNG
    1.1k Posts 192 Posters 1.8m Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      doktornotor Banned
      last edited by

      @mk6032:

      I just wanted to report that I'm seeing the following in system -> pkg manager -> installed, even after reinstalling the package.

      http://imgur.com/a/I3mep

      Yes. And the point of the report is exactly what?

      1 Reply Last reply Reply Quote 0
      • M
        mk6032
        last edited by

        @doktornotor:

        @mk6032:

        I just wanted to report that I'm seeing the following in system -> pkg manager -> installed, even after reinstalling the package.

        http://imgur.com/a/I3mep

        Yes. And the point of the report is exactly what?

        Please review the linked image. There are two points :

        1. "Package is configured but not (fully) installed" (even after reinstallation)
        2. "Newer version available" (without the update option)

        Regards,
        Matt

        1 Reply Last reply Reply Quote 0
        • RonpfSR
          RonpfS
          last edited by

          @mk6032:

          Please review the linked image. There are two points :

          1. "Package is configured but not (fully) installed" (even after reinstallation)
          2. "Newer version available" (without the update option)

          Regards,
          Matt

          That is the Legend for the Package Manager  ::)

          So now look a the pfBlockerNG line and interpreting the legend the status of the package is "Current"

          2.4.5-RELEASE-p1 (amd64)
          Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
          Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

          1 Reply Last reply Reply Quote 0
          • M
            mk6032
            last edited by

            @RonpfS:

            That is the Legend for the Package Manager  ::)

            So now look a the pfBlockerNG line and interpreting the legend the status of the package is "Current"

            Ah, my bad! The lack of a separator there as opposed to the ones above it is a bit confusing ( http://imgur.com/a/lwSFx ).

            Regards,
            Matt

            1 Reply Last reply Reply Quote 0
            • D
              doktornotor Banned
              last edited by

              @mk6032:

              @RonpfS:

              That is the Legend for the Package Manager  ::)

              So now look a the pfBlockerNG line and interpreting the legend the status of the package is "Current"

              Ah, my bad! The lack of a separator there as opposed to the ones above it is a bit confusing ( http://imgur.com/a/lwSFx ).

              Regards,
              Matt

              LOL, ok… https://redmine.pfsense.org/issues/7203

              1 Reply Last reply Reply Quote 0
              • RonpfSR
                RonpfS
                last edited by

                @doktornotor:

                LOL, ok… https://redmine.pfsense.org/issues/7203

                Maybe just add "Legend : "

                2.4.5-RELEASE-p1 (amd64)
                Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
                Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

                1 Reply Last reply Reply Quote 0
                • D
                  doktornotor Banned
                  last edited by

                  @RonpfS:

                  @doktornotor:

                  LOL, ok… https://redmine.pfsense.org/issues/7203

                  Maybe just add "Legend : "

                  Yeah I tried and that looked even worse than now. Leaving this to someone else.

                  1 Reply Last reply Reply Quote 0
                  • R
                    Redyr Banned
                    last edited by

                    Hello,

                    Regarding Adaway,

                    https://adaway.org/hosts.txt

                    Although the list is downloaded:

                    [ Adaway ] Downloading update .. 200 OK. completed ..

                    I got this error:

                    [ pfB_Adaway Adaway ] List Error ]

                    Please advise

                    1 Reply Last reply Reply Quote 0
                    • BBcan177B
                      BBcan177 Moderator
                      last edited by

                      I assume that Adaway is also the name of the Alias?

                      Do you have anything in the custom list at the bottom of this alias? I think that's the part that's not parsing properly. Anything in a custom list must be formatted properly.

                      "Experience is something you don't get until just after you need it."

                      Website: http://pfBlockerNG.com
                      Twitter: @BBcan177  #pfBlockerNG
                      Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                      1 Reply Last reply Reply Quote 0
                      • R
                        Redyr Banned
                        last edited by

                        @BBcan177:

                        I assume that Adaway is also the name of the Alias?

                        Do you have anything in the custom list at the bottom of this alias? I think that's the part that's not parsing properly. Anything in a custom list must be formatted properly.

                        The name of the alias is Adaway, and I don't have anything in the custom list.

                        I've changed the name of the alias, and the label like this:

                        Adaway_list ] Downloading update .. 200 OK. completed ..
                        [ pfB_Adaway1 Adaway_list ] List Error ]

                        1 Reply Last reply Reply Quote 0
                        • BBcan177B
                          BBcan177 Moderator
                          last edited by

                          It looks like you added this list to the IPv4 tab when it's a domain based list and should only be used in the DNSBL tab.

                          "Experience is something you don't get until just after you need it."

                          Website: http://pfBlockerNG.com
                          Twitter: @BBcan177  #pfBlockerNG
                          Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                          1 Reply Last reply Reply Quote 0
                          • R
                            Redyr Banned
                            last edited by

                            @BBcan177:

                            It looks like you added this list to the IPv4 tab when it's a domain based list and should only be used in the DNSBL tab.

                            I removed it from IPV4, sorry to bother you with this.

                            Thank you

                            1 Reply Last reply Reply Quote 0
                            • Y
                              yodaphone
                              last edited by

                              @BBcan177:

                              Here are more DNSBL Feeds that can be used in pfBlockerNG.
                              (Copy and paste URLS as plain text)

                              1. Create a new alias for these.
                                These are not necessarily ADvert domains. So I named mine "Malicious"

                              malc0de
                              https://malc0de.com/bl/BOOT

                              I get this error for malc0de. all other lists are fine

                              [ DNSBL_Malicious - malc0de ] Download FAIL [ 02/21/17 01:21:47 ]
                                Firewall and/or IDS are not blocking download.

                              Set up exactly the way you have described.

                              I'm on 2.3.3 RC

                              1 Reply Last reply Reply Quote 0
                              • BBcan177B
                                BBcan177 Moderator
                                last edited by

                                @yodaphone:

                                I get this error for malc0de. all other lists are fine

                                [ DNSBL_Malicious - malc0de ] Download FAIL [ 02/21/17 01:21:47 ]
                                  Firewall and/or IDS are not blocking download.

                                Not having any issues with that feed…  Try to

                                ping malc0de.com
                                

                                and see if it responds… Check the Alerts Tab to see if any alerts get reported... Could be Snort/Suricata, or another Firewall rule....

                                "Experience is something you don't get until just after you need it."

                                Website: http://pfBlockerNG.com
                                Twitter: @BBcan177  #pfBlockerNG
                                Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                                1 Reply Last reply Reply Quote 0
                                • H
                                  HeatmiserNYC
                                  last edited by

                                  Hey BBCAN,
                                  Is there a way to get Reek's anti-adblocking list to work under Pfblocker? This would be extremely convenient.

                                  My apologies if this has been asked a trillion times before….

                                  1 Reply Last reply Reply Quote 0
                                  • BBcan177B
                                    BBcan177 Moderator
                                    last edited by

                                    @HeatmiserNYC:

                                    Is there a way to get Reek's anti-adblocking list to work under Pfblocker? This would be extremely convenient

                                    Unfortunately not. DNSBL can't manipulate the browser except for sinkholing the DNS request.

                                    "Experience is something you don't get until just after you need it."

                                    Website: http://pfBlockerNG.com
                                    Twitter: @BBcan177  #pfBlockerNG
                                    Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                                    1 Reply Last reply Reply Quote 0
                                    • B
                                      Brutos
                                      last edited by

                                      Does anyone have a good list for blocking porn sites please?b

                                      I have google and searched and cant find any.

                                      1 Reply Last reply Reply Quote 0
                                      • P
                                        pfBasic Banned
                                        last edited by

                                        @Brutos:

                                        Does anyone have a good list for blocking porn sites please?b

                                        I have google and searched and cant find any.

                                        https://forum.pfsense.org/index.php?topic=125863.0

                                        1 Reply Last reply Reply Quote 0
                                        • D
                                          D0X
                                          last edited by

                                          @BBcan177:

                                          @D0X:

                                          Thanks for your support so far, but for now I've given up on pfblockerng. Not that the package is flawed, but Safari on OSX and IOS is driving me nuts.

                                          NP…. Should you decide to pick it backup at some point, try to see why the Ping/Browse to the DNSBL VIP wasn't working. That will cause issues on its own.... also since it was one Domain that was predominantly causing issues,  you could also Whitelist it...

                                          Quoting this old post, but the problem is still occurring. Tried PfblockerNG again this morning, but all Apple devices still bombards me with certificate errors.

                                          1 Reply Last reply Reply Quote 0
                                          • BBcan177B
                                            BBcan177 Moderator
                                            last edited by

                                            @D0X:

                                            Quoting this old post, but the problem is still occurring. Tried PfblockerNG again this morning, but all Apple devices still bombards me with certificate errors.

                                            Is this with Safari, or all other browsers?

                                            Can you review this link:
                                                https://forum.pfsense.org/index.php?topic=124945.msg691099#msg691099

                                            "Experience is something you don't get until just after you need it."

                                            Website: http://pfBlockerNG.com
                                            Twitter: @BBcan177  #pfBlockerNG
                                            Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.