Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PfBlockerNG v2.0 w/DNSBL

    Scheduled Pinned Locked Moved pfBlockerNG
    1.1k Posts 192 Posters 1.7m Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • RonpfSR
      RonpfS
      last edited by

      @mk6032:

      Please review the linked image. There are two points :

      1. "Package is configured but not (fully) installed" (even after reinstallation)
      2. "Newer version available" (without the update option)

      Regards,
      Matt

      That is the Legend for the Package Manager  ::)

      So now look a the pfBlockerNG line and interpreting the legend the status of the package is "Current"

      2.4.5-RELEASE-p1 (amd64)
      Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
      Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

      1 Reply Last reply Reply Quote 0
      • M
        mk6032
        last edited by

        @RonpfS:

        That is the Legend for the Package Manager  ::)

        So now look a the pfBlockerNG line and interpreting the legend the status of the package is "Current"

        Ah, my bad! The lack of a separator there as opposed to the ones above it is a bit confusing ( http://imgur.com/a/lwSFx ).

        Regards,
        Matt

        1 Reply Last reply Reply Quote 0
        • D
          doktornotor Banned
          last edited by

          @mk6032:

          @RonpfS:

          That is the Legend for the Package Manager  ::)

          So now look a the pfBlockerNG line and interpreting the legend the status of the package is "Current"

          Ah, my bad! The lack of a separator there as opposed to the ones above it is a bit confusing ( http://imgur.com/a/lwSFx ).

          Regards,
          Matt

          LOL, ok… https://redmine.pfsense.org/issues/7203

          1 Reply Last reply Reply Quote 0
          • RonpfSR
            RonpfS
            last edited by

            @doktornotor:

            LOL, ok… https://redmine.pfsense.org/issues/7203

            Maybe just add "Legend : "

            2.4.5-RELEASE-p1 (amd64)
            Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
            Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

            1 Reply Last reply Reply Quote 0
            • D
              doktornotor Banned
              last edited by

              @RonpfS:

              @doktornotor:

              LOL, ok… https://redmine.pfsense.org/issues/7203

              Maybe just add "Legend : "

              Yeah I tried and that looked even worse than now. Leaving this to someone else.

              1 Reply Last reply Reply Quote 0
              • R
                Redyr Banned
                last edited by

                Hello,

                Regarding Adaway,

                https://adaway.org/hosts.txt

                Although the list is downloaded:

                [ Adaway ] Downloading update .. 200 OK. completed ..

                I got this error:

                [ pfB_Adaway Adaway ] List Error ]

                Please advise

                1 Reply Last reply Reply Quote 0
                • BBcan177B
                  BBcan177 Moderator
                  last edited by

                  I assume that Adaway is also the name of the Alias?

                  Do you have anything in the custom list at the bottom of this alias? I think that's the part that's not parsing properly. Anything in a custom list must be formatted properly.

                  "Experience is something you don't get until just after you need it."

                  Website: http://pfBlockerNG.com
                  Twitter: @BBcan177  #pfBlockerNG
                  Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                  1 Reply Last reply Reply Quote 0
                  • R
                    Redyr Banned
                    last edited by

                    @BBcan177:

                    I assume that Adaway is also the name of the Alias?

                    Do you have anything in the custom list at the bottom of this alias? I think that's the part that's not parsing properly. Anything in a custom list must be formatted properly.

                    The name of the alias is Adaway, and I don't have anything in the custom list.

                    I've changed the name of the alias, and the label like this:

                    Adaway_list ] Downloading update .. 200 OK. completed ..
                    [ pfB_Adaway1 Adaway_list ] List Error ]

                    1 Reply Last reply Reply Quote 0
                    • BBcan177B
                      BBcan177 Moderator
                      last edited by

                      It looks like you added this list to the IPv4 tab when it's a domain based list and should only be used in the DNSBL tab.

                      "Experience is something you don't get until just after you need it."

                      Website: http://pfBlockerNG.com
                      Twitter: @BBcan177  #pfBlockerNG
                      Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                      1 Reply Last reply Reply Quote 0
                      • R
                        Redyr Banned
                        last edited by

                        @BBcan177:

                        It looks like you added this list to the IPv4 tab when it's a domain based list and should only be used in the DNSBL tab.

                        I removed it from IPV4, sorry to bother you with this.

                        Thank you

                        1 Reply Last reply Reply Quote 0
                        • Y
                          yodaphone
                          last edited by

                          @BBcan177:

                          Here are more DNSBL Feeds that can be used in pfBlockerNG.
                          (Copy and paste URLS as plain text)

                          1. Create a new alias for these.
                            These are not necessarily ADvert domains. So I named mine "Malicious"

                          malc0de
                          https://malc0de.com/bl/BOOT

                          I get this error for malc0de. all other lists are fine

                          [ DNSBL_Malicious - malc0de ] Download FAIL [ 02/21/17 01:21:47 ]
                            Firewall and/or IDS are not blocking download.

                          Set up exactly the way you have described.

                          I'm on 2.3.3 RC

                          1 Reply Last reply Reply Quote 0
                          • BBcan177B
                            BBcan177 Moderator
                            last edited by

                            @yodaphone:

                            I get this error for malc0de. all other lists are fine

                            [ DNSBL_Malicious - malc0de ] Download FAIL [ 02/21/17 01:21:47 ]
                              Firewall and/or IDS are not blocking download.

                            Not having any issues with that feed…  Try to

                            ping malc0de.com
                            

                            and see if it responds… Check the Alerts Tab to see if any alerts get reported... Could be Snort/Suricata, or another Firewall rule....

                            "Experience is something you don't get until just after you need it."

                            Website: http://pfBlockerNG.com
                            Twitter: @BBcan177  #pfBlockerNG
                            Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                            1 Reply Last reply Reply Quote 0
                            • H
                              HeatmiserNYC
                              last edited by

                              Hey BBCAN,
                              Is there a way to get Reek's anti-adblocking list to work under Pfblocker? This would be extremely convenient.

                              My apologies if this has been asked a trillion times before….

                              1 Reply Last reply Reply Quote 0
                              • BBcan177B
                                BBcan177 Moderator
                                last edited by

                                @HeatmiserNYC:

                                Is there a way to get Reek's anti-adblocking list to work under Pfblocker? This would be extremely convenient

                                Unfortunately not. DNSBL can't manipulate the browser except for sinkholing the DNS request.

                                "Experience is something you don't get until just after you need it."

                                Website: http://pfBlockerNG.com
                                Twitter: @BBcan177  #pfBlockerNG
                                Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                                1 Reply Last reply Reply Quote 0
                                • B
                                  Brutos
                                  last edited by

                                  Does anyone have a good list for blocking porn sites please?b

                                  I have google and searched and cant find any.

                                  1 Reply Last reply Reply Quote 0
                                  • P
                                    pfBasic Banned
                                    last edited by

                                    @Brutos:

                                    Does anyone have a good list for blocking porn sites please?b

                                    I have google and searched and cant find any.

                                    https://forum.pfsense.org/index.php?topic=125863.0

                                    1 Reply Last reply Reply Quote 0
                                    • D
                                      D0X
                                      last edited by

                                      @BBcan177:

                                      @D0X:

                                      Thanks for your support so far, but for now I've given up on pfblockerng. Not that the package is flawed, but Safari on OSX and IOS is driving me nuts.

                                      NP…. Should you decide to pick it backup at some point, try to see why the Ping/Browse to the DNSBL VIP wasn't working. That will cause issues on its own.... also since it was one Domain that was predominantly causing issues,  you could also Whitelist it...

                                      Quoting this old post, but the problem is still occurring. Tried PfblockerNG again this morning, but all Apple devices still bombards me with certificate errors.

                                      1 Reply Last reply Reply Quote 0
                                      • BBcan177B
                                        BBcan177 Moderator
                                        last edited by

                                        @D0X:

                                        Quoting this old post, but the problem is still occurring. Tried PfblockerNG again this morning, but all Apple devices still bombards me with certificate errors.

                                        Is this with Safari, or all other browsers?

                                        Can you review this link:
                                            https://forum.pfsense.org/index.php?topic=124945.msg691099#msg691099

                                        "Experience is something you don't get until just after you need it."

                                        Website: http://pfBlockerNG.com
                                        Twitter: @BBcan177  #pfBlockerNG
                                        Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                                        1 Reply Last reply Reply Quote 0
                                        • ?
                                          Guest
                                          last edited by

                                          Does anyone have a good list for blocking porn sites please?b

                                          There are more options to get better results and for porn sites an OpenDNS account might be a good solution as well!
                                          Squid & SquidGuard or DansGuardian plus pfBlockerNG & DNSBL plus an OpenDNS account

                                          1 Reply Last reply Reply Quote 0
                                          • D
                                            D0X
                                            last edited by

                                            @BBcan177:

                                            @D0X:

                                            Quoting this old post, but the problem is still occurring. Tried PfblockerNG again this morning, but all Apple devices still bombards me with certificate errors.

                                            Is this with Safari, or all other browsers?

                                            Can you review this link:
                                                https://forum.pfsense.org/index.php?topic=124945.msg691099#msg691099

                                            Safari indeed, on all devices, moving to another browser is not an option here. Doing the mod you suggested, no logging whatsoever will work?

                                            Running Pi-Hole here for a few days now, as an alternative. But this means adding another box to my network. Plus the config is a little weird (pfSense DCHP server forwarding Pi-Hole dns address to clients, clients using Pi-Hole and Pi-Hole using the pfSense DNS Resolver again as its upstream DNS, don't know, feels weird).

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.