• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

PfBlockerNG Not Blocking Porn

pfBlockerNG
12
24
28.0k
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • S
    someuser123
    last edited by Feb 20, 2017, 5:49 PM

    try adding new porn blacklist
    https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/porn/hosts

    you can read more about it here: https://github.com/StevenBlack/hosts

    1 Reply Last reply Reply Quote 0
    • S
      seanpruitt
      last edited by Feb 20, 2017, 6:02 PM

      Thanks guys… I tried both and it seems to be working. I'm not sure i understood the TLD custom list, it seems the same as adding terms to Squid. I've used Squid in the past and It never worked the way I wanted it to. I was trying a different solution.

      Do I have to flush the DNS? I find that flushing my local DNS seems to work at times but I feel like part of my problem is the DNS is cached domains overriding the filter. Do I have to flush the gateway DNS? If so how?

      Thanks guys.

      1 Reply Last reply Reply Quote 0
      • P
        pfBasic Banned
        last edited by Feb 21, 2017, 5:05 AM

        I poked around with this for shits and giggles (and because I have two sons that someday over the rainbow I'd like to extend their innocence a bit longer if I can), Here's a thread with links to threads on here that will walk you through the best process I've found.
        https://forum.pfsense.org/index.php?topic=124013.msg685623#msg685623

        Basically,

        Use DNS Resolver and force all traffic on whatever subnet your kids are on to use the resolver.
        (Definitely recommend using a separate subnet as the stuff you'll need to do will probably annoy you if you have to use the same settings)

        Use pfBlockerNG with DNSBL

        Import shallalist into DNSBL and use the porn categories there, and whatever else you like.

        Also, force google safe search (you can block search engines through shallist, and whitelist google)
        https://forum.pfsense.org/index.php?topic=118502.msg657295#msg657295
        https://forum.pfsense.org/index.php?topic=119413.msg665804#msg665804
        https://www.google.com/supported_domains

        Ultimately, nothing will be perfect and even if it were kids go to friends homes, have smart phones, etc. But this should be a pretty damn good automated setup to keep your kids from stumbling into Batman's darkest secrets. (Not really, it won't do a thing for youtube unless you want to block it completely, but I think there are other things you can do for that if you want).

        Youtube Video

        1 Reply Last reply Reply Quote 1
        • P
          pfBasic Banned
          last edited by Feb 21, 2017, 5:12 AM

          @BBcan177:

          Blocking porn is really difficult with DNSBL… There are millions of domains ....

          I don't know if this is something you're interested in BBCan, but if you are shallalist (and a few others) are pretty decently maintained lists for blocking porn and a few other categories. They work really well with pfBNG & DNSBL.

          The ways to get them working with DNSBL are kind of rudimentary and obscure right now, if you were to implement a built in way to use them I think it would be extremely popular.

          Squid is just to flaky and invasive on HTTP/S to be useful for stuff like blocking porn. pfBNG just works, well.

          1 Reply Last reply Reply Quote 0
          • G
            gcu_greyarea
            last edited by Feb 22, 2017, 9:43 AM

            Why don't you use open dns family shield ?

            1 Reply Last reply Reply Quote 0
            • S
              someuser123
              last edited by Feb 22, 2017, 3:03 PM

              @pfBasic:

              @BBcan177:

              Blocking porn is really difficult with DNSBL… There are millions of domains ....

              I don't know if this is something you're interested in BBCan, but if you are shallalist (and a few others) are pretty decently maintained lists for blocking porn and a few other categories. They work really well with pfBNG & DNSBL.

              The ways to get them working with DNSBL are kind of rudimentary and obscure right now, if you were to implement a built in way to use them I think it would be extremely popular.

              Squid is just to flaky and invasive on HTTP/S to be useful for stuff like blocking porn. pfBNG just works, well.

              future build of pfblockerng will have option to use shallalist/UT1/squidblacklist

              @BBcan177 is working on it, this feature is in beta right now, i personally don't feel the need of squidguard anymore.

              1 Reply Last reply Reply Quote 0
              • P
                pfBasic Banned
                last edited by Feb 22, 2017, 3:25 PM

                That is awesome! I love BBCan's work!

                1 Reply Last reply Reply Quote 0
                • S
                  seanpruitt
                  last edited by Mar 3, 2017, 3:10 PM

                  That is awesome. I was able to get the shalllist to work by following these instructions >> https://forum.pfsense.org/index.php?topic=120072.0#msg664172
                  It doesn't block out everything but it seems to be working better then squid guard. I feel with pfBlock, blocking serveral sites manually, forcing google restricted search, and keeping and eye on squid proxy logs is the best way to go. I've tried SquidGuard and I always found my self thinking is this thing even working!!! There are people that live by SquidGuard but I spent weeks trying to get basic settings to work. PfBlockerNG worked immediatley with results I can count on. Feel like I'm on an infomercial here.

                  Thanks guys for all of your help on this!  :)

                  1 Reply Last reply Reply Quote 0
                  • S
                    seanpruitt
                    last edited by Mar 4, 2017, 5:43 PM

                    So I'm blocking porn, that's great! But the problem I'm running into now is I can't watch any howto videos on youtube because the host is forcing restricted mode. Is there a way to only for kids into restricted mode vs the entire network?

                    1 Reply Last reply Reply Quote 0
                    • D
                      doktornotor Banned
                      last edited by Mar 4, 2017, 5:47 PM

                      @seanpruitt:

                      So I'm blocking porn, that's great! But the problem I'm running into now is I can't watch any howto videos on youtube because the host is forcing restricted mode.

                      Perhaps try some other site for p0rn howtos?  :P

                      1 Reply Last reply Reply Quote 1
                      • P
                        pfBasic Banned
                        last edited by Mar 4, 2017, 5:58 PM

                        @seanpruitt:

                        So I'm blocking porn, that's great! But the problem I'm running into now is I can't watch any howto videos on youtube because the host is forcing restricted mode. Is there a way to only for kids into restricted mode vs the entire network?

                        The easiest way is to get another AP for the kids and put it on a separate interface/subnet. Then just apply all of this stuff to that subnet only.
                        A work around would be to connect to a VPN on the computer you are using (unless you are effectively blocking VPN IP's with a list).

                        1 Reply Last reply Reply Quote 1
                        • T
                          thatmakesnoSense
                          last edited by Oct 21, 2017, 7:09 PM

                          @someuser123:

                          future build of pfblockerng will have option to use shallalist/UT1/squidblacklist

                          @BBcan177 is working on it, this feature is in beta right now, i personally don't feel the need of squidguard anymore.

                          Hi,

                          from which build on the option shallalist will be available in pfblockerng? I can not find it in the current version (2.1.2 - under pfSense 2.4.0 release).

                          Regards

                          1 Reply Last reply Reply Quote 0
                          • A
                            Albertopfsense
                            last edited by Oct 27, 2017, 5:57 AM

                            good morning
                            at this moment shalla list used as dnbl  feed list into dnsbl not block ( block only site without www ex block mybadsite.com but forward www.mybadsite.com)

                            someone has found a solution ?

                            thanks Alberto

                            1 Reply Last reply Reply Quote 0
                            • BBcan177B
                              BBcan177 Moderator
                              last edited by Oct 27, 2017, 4:36 PM

                              Enable the "TLD" option… Click on the blue infoblock icon for more details about TLD...

                              "Experience is something you don't get until just after you need it."

                              Website: http://pfBlockerNG.com
                              Twitter: @BBcan177  #pfBlockerNG
                              Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                              1 Reply Last reply Reply Quote 0
                              • K
                                kejianshi
                                last edited by Oct 27, 2017, 4:43 PM

                                I've found over the years that trying to block porn is a losing battle.  Short of white listing or unplugging the internet…

                                1 Reply Last reply Reply Quote 0
                                • A
                                  Albertopfsense
                                  last edited by Nov 20, 2017, 5:11 PM

                                  good morning all

                                  there are some news for use dnsbl as content filter
                                  ex with shalla dbase as dicussuion in this post ?

                                  thanks again Alberto

                                  1 Reply Last reply Reply Quote 0
                                  • K
                                    kaushal7007
                                    last edited by Apr 11, 2018, 8:12 AM

                                    @someuser123:

                                    try adding new porn blacklist
                                    https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/porn/hosts

                                    you can read more about it here: https://github.com/StevenBlack/hosts

                                    thanks for this,

                                    i wanted to setup with my existing SquidGuard Proxy Filter.    (Currently using http://www.shallalist.de/Downloads/shallalist.tar.gz)

                                    regards,
                                    kaushal

                                    1 Reply Last reply Reply Quote 0
                                    • C
                                      chuane
                                      last edited by Jul 24, 2018, 2:24 PM

                                      Hello
                                      with shallalist I filter domains whitout www, but when i tried same domains with www prefix, doesn't work.
                                      Any ideas?
                                      Thanks

                                      BBcan177B 1 Reply Last reply Jul 25, 2018, 2:26 AM Reply Quote 0
                                      • BBcan177B
                                        BBcan177 Moderator @chuane
                                        last edited by Jul 25, 2018, 2:26 AM

                                        @chuane said in PfBlockerNG Not Blocking Porn:

                                        with shallalist I filter domains whitout www, but when i tried same domains with www prefix, doesn't work.

                                        You will need to enable the "TLD" option, otherwise it will only block the domain that is listed in the Feed, and not block all Sub-domains.

                                        A Force Reload - DNSBL will need to be run for it to take effect.

                                        "Experience is something you don't get until just after you need it."

                                        Website: http://pfBlockerNG.com
                                        Twitter: @BBcan177  #pfBlockerNG
                                        Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                                        1 Reply Last reply Reply Quote 0
                                        • C
                                          chuane
                                          last edited by Jul 25, 2018, 6:19 AM

                                          Thanks for response!
                                          I have this option checked, but It doesn't work.
                                          Same problem.

                                          1 Reply Last reply Reply Quote 0
                                          • First post
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.