Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PfBlockerNG v2.0 w/DNSBL

    Scheduled Pinned Locked Moved pfBlockerNG
    1.1k Posts 192 Posters 1.7m Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mk6032
      last edited by

      @doktornotor:

      @mk6032:

      I just wanted to report that I'm seeing the following in system -> pkg manager -> installed, even after reinstalling the package.

      http://imgur.com/a/I3mep

      Yes. And the point of the report is exactly what?

      Please review the linked image. There are two points :

      1. "Package is configured but not (fully) installed" (even after reinstallation)
      2. "Newer version available" (without the update option)

      Regards,
      Matt

      1 Reply Last reply Reply Quote 0
      • RonpfSR
        RonpfS
        last edited by

        @mk6032:

        Please review the linked image. There are two points :

        1. "Package is configured but not (fully) installed" (even after reinstallation)
        2. "Newer version available" (without the update option)

        Regards,
        Matt

        That is the Legend for the Package Manager  ::)

        So now look a the pfBlockerNG line and interpreting the legend the status of the package is "Current"

        2.4.5-RELEASE-p1 (amd64)
        Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
        Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

        1 Reply Last reply Reply Quote 0
        • M
          mk6032
          last edited by

          @RonpfS:

          That is the Legend for the Package Manager  ::)

          So now look a the pfBlockerNG line and interpreting the legend the status of the package is "Current"

          Ah, my bad! The lack of a separator there as opposed to the ones above it is a bit confusing ( http://imgur.com/a/lwSFx ).

          Regards,
          Matt

          1 Reply Last reply Reply Quote 0
          • D
            doktornotor Banned
            last edited by

            @mk6032:

            @RonpfS:

            That is the Legend for the Package Manager  ::)

            So now look a the pfBlockerNG line and interpreting the legend the status of the package is "Current"

            Ah, my bad! The lack of a separator there as opposed to the ones above it is a bit confusing ( http://imgur.com/a/lwSFx ).

            Regards,
            Matt

            LOL, ok… https://redmine.pfsense.org/issues/7203

            1 Reply Last reply Reply Quote 0
            • RonpfSR
              RonpfS
              last edited by

              @doktornotor:

              LOL, ok… https://redmine.pfsense.org/issues/7203

              Maybe just add "Legend : "

              2.4.5-RELEASE-p1 (amd64)
              Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
              Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

              1 Reply Last reply Reply Quote 0
              • D
                doktornotor Banned
                last edited by

                @RonpfS:

                @doktornotor:

                LOL, ok… https://redmine.pfsense.org/issues/7203

                Maybe just add "Legend : "

                Yeah I tried and that looked even worse than now. Leaving this to someone else.

                1 Reply Last reply Reply Quote 0
                • R
                  Redyr Banned
                  last edited by

                  Hello,

                  Regarding Adaway,

                  https://adaway.org/hosts.txt

                  Although the list is downloaded:

                  [ Adaway ] Downloading update .. 200 OK. completed ..

                  I got this error:

                  [ pfB_Adaway Adaway ] List Error ]

                  Please advise

                  1 Reply Last reply Reply Quote 0
                  • BBcan177B
                    BBcan177 Moderator
                    last edited by

                    I assume that Adaway is also the name of the Alias?

                    Do you have anything in the custom list at the bottom of this alias? I think that's the part that's not parsing properly. Anything in a custom list must be formatted properly.

                    "Experience is something you don't get until just after you need it."

                    Website: http://pfBlockerNG.com
                    Twitter: @BBcan177  #pfBlockerNG
                    Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                    1 Reply Last reply Reply Quote 0
                    • R
                      Redyr Banned
                      last edited by

                      @BBcan177:

                      I assume that Adaway is also the name of the Alias?

                      Do you have anything in the custom list at the bottom of this alias? I think that's the part that's not parsing properly. Anything in a custom list must be formatted properly.

                      The name of the alias is Adaway, and I don't have anything in the custom list.

                      I've changed the name of the alias, and the label like this:

                      Adaway_list ] Downloading update .. 200 OK. completed ..
                      [ pfB_Adaway1 Adaway_list ] List Error ]

                      1 Reply Last reply Reply Quote 0
                      • BBcan177B
                        BBcan177 Moderator
                        last edited by

                        It looks like you added this list to the IPv4 tab when it's a domain based list and should only be used in the DNSBL tab.

                        "Experience is something you don't get until just after you need it."

                        Website: http://pfBlockerNG.com
                        Twitter: @BBcan177  #pfBlockerNG
                        Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                        1 Reply Last reply Reply Quote 0
                        • R
                          Redyr Banned
                          last edited by

                          @BBcan177:

                          It looks like you added this list to the IPv4 tab when it's a domain based list and should only be used in the DNSBL tab.

                          I removed it from IPV4, sorry to bother you with this.

                          Thank you

                          1 Reply Last reply Reply Quote 0
                          • Y
                            yodaphone
                            last edited by

                            @BBcan177:

                            Here are more DNSBL Feeds that can be used in pfBlockerNG.
                            (Copy and paste URLS as plain text)

                            1. Create a new alias for these.
                              These are not necessarily ADvert domains. So I named mine "Malicious"

                            malc0de
                            https://malc0de.com/bl/BOOT

                            I get this error for malc0de. all other lists are fine

                            [ DNSBL_Malicious - malc0de ] Download FAIL [ 02/21/17 01:21:47 ]
                              Firewall and/or IDS are not blocking download.

                            Set up exactly the way you have described.

                            I'm on 2.3.3 RC

                            1 Reply Last reply Reply Quote 0
                            • BBcan177B
                              BBcan177 Moderator
                              last edited by

                              @yodaphone:

                              I get this error for malc0de. all other lists are fine

                              [ DNSBL_Malicious - malc0de ] Download FAIL [ 02/21/17 01:21:47 ]
                                Firewall and/or IDS are not blocking download.

                              Not having any issues with that feed…  Try to

                              ping malc0de.com
                              

                              and see if it responds… Check the Alerts Tab to see if any alerts get reported... Could be Snort/Suricata, or another Firewall rule....

                              "Experience is something you don't get until just after you need it."

                              Website: http://pfBlockerNG.com
                              Twitter: @BBcan177  #pfBlockerNG
                              Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                              1 Reply Last reply Reply Quote 0
                              • H
                                HeatmiserNYC
                                last edited by

                                Hey BBCAN,
                                Is there a way to get Reek's anti-adblocking list to work under Pfblocker? This would be extremely convenient.

                                My apologies if this has been asked a trillion times before….

                                1 Reply Last reply Reply Quote 0
                                • BBcan177B
                                  BBcan177 Moderator
                                  last edited by

                                  @HeatmiserNYC:

                                  Is there a way to get Reek's anti-adblocking list to work under Pfblocker? This would be extremely convenient

                                  Unfortunately not. DNSBL can't manipulate the browser except for sinkholing the DNS request.

                                  "Experience is something you don't get until just after you need it."

                                  Website: http://pfBlockerNG.com
                                  Twitter: @BBcan177  #pfBlockerNG
                                  Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                                  1 Reply Last reply Reply Quote 0
                                  • B
                                    Brutos
                                    last edited by

                                    Does anyone have a good list for blocking porn sites please?b

                                    I have google and searched and cant find any.

                                    1 Reply Last reply Reply Quote 0
                                    • P
                                      pfBasic Banned
                                      last edited by

                                      @Brutos:

                                      Does anyone have a good list for blocking porn sites please?b

                                      I have google and searched and cant find any.

                                      https://forum.pfsense.org/index.php?topic=125863.0

                                      1 Reply Last reply Reply Quote 0
                                      • D
                                        D0X
                                        last edited by

                                        @BBcan177:

                                        @D0X:

                                        Thanks for your support so far, but for now I've given up on pfblockerng. Not that the package is flawed, but Safari on OSX and IOS is driving me nuts.

                                        NP…. Should you decide to pick it backup at some point, try to see why the Ping/Browse to the DNSBL VIP wasn't working. That will cause issues on its own.... also since it was one Domain that was predominantly causing issues,  you could also Whitelist it...

                                        Quoting this old post, but the problem is still occurring. Tried PfblockerNG again this morning, but all Apple devices still bombards me with certificate errors.

                                        1 Reply Last reply Reply Quote 0
                                        • BBcan177B
                                          BBcan177 Moderator
                                          last edited by

                                          @D0X:

                                          Quoting this old post, but the problem is still occurring. Tried PfblockerNG again this morning, but all Apple devices still bombards me with certificate errors.

                                          Is this with Safari, or all other browsers?

                                          Can you review this link:
                                              https://forum.pfsense.org/index.php?topic=124945.msg691099#msg691099

                                          "Experience is something you don't get until just after you need it."

                                          Website: http://pfBlockerNG.com
                                          Twitter: @BBcan177  #pfBlockerNG
                                          Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                                          1 Reply Last reply Reply Quote 0
                                          • ?
                                            Guest
                                            last edited by

                                            Does anyone have a good list for blocking porn sites please?b

                                            There are more options to get better results and for porn sites an OpenDNS account might be a good solution as well!
                                            Squid & SquidGuard or DansGuardian plus pfBlockerNG & DNSBL plus an OpenDNS account

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.