Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PfBlockerNG Not Blocking Porn

    Scheduled Pinned Locked Moved pfBlockerNG
    24 Posts 12 Posters 28.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      seanpruitt
      last edited by

      Thanks guys… I tried both and it seems to be working. I'm not sure i understood the TLD custom list, it seems the same as adding terms to Squid. I've used Squid in the past and It never worked the way I wanted it to. I was trying a different solution.

      Do I have to flush the DNS? I find that flushing my local DNS seems to work at times but I feel like part of my problem is the DNS is cached domains overriding the filter. Do I have to flush the gateway DNS? If so how?

      Thanks guys.

      1 Reply Last reply Reply Quote 0
      • P
        pfBasic Banned
        last edited by

        I poked around with this for shits and giggles (and because I have two sons that someday over the rainbow I'd like to extend their innocence a bit longer if I can), Here's a thread with links to threads on here that will walk you through the best process I've found.
        https://forum.pfsense.org/index.php?topic=124013.msg685623#msg685623

        Basically,

        Use DNS Resolver and force all traffic on whatever subnet your kids are on to use the resolver.
        (Definitely recommend using a separate subnet as the stuff you'll need to do will probably annoy you if you have to use the same settings)

        Use pfBlockerNG with DNSBL

        Import shallalist into DNSBL and use the porn categories there, and whatever else you like.

        Also, force google safe search (you can block search engines through shallist, and whitelist google)
        https://forum.pfsense.org/index.php?topic=118502.msg657295#msg657295
        https://forum.pfsense.org/index.php?topic=119413.msg665804#msg665804
        https://www.google.com/supported_domains

        Ultimately, nothing will be perfect and even if it were kids go to friends homes, have smart phones, etc. But this should be a pretty damn good automated setup to keep your kids from stumbling into Batman's darkest secrets. (Not really, it won't do a thing for youtube unless you want to block it completely, but I think there are other things you can do for that if you want).

        Youtube Video

        1 Reply Last reply Reply Quote 1
        • P
          pfBasic Banned
          last edited by

          @BBcan177:

          Blocking porn is really difficult with DNSBL… There are millions of domains ....

          I don't know if this is something you're interested in BBCan, but if you are shallalist (and a few others) are pretty decently maintained lists for blocking porn and a few other categories. They work really well with pfBNG & DNSBL.

          The ways to get them working with DNSBL are kind of rudimentary and obscure right now, if you were to implement a built in way to use them I think it would be extremely popular.

          Squid is just to flaky and invasive on HTTP/S to be useful for stuff like blocking porn. pfBNG just works, well.

          1 Reply Last reply Reply Quote 0
          • G
            gcu_greyarea
            last edited by

            Why don't you use open dns family shield ?

            1 Reply Last reply Reply Quote 0
            • S
              someuser123
              last edited by

              @pfBasic:

              @BBcan177:

              Blocking porn is really difficult with DNSBL… There are millions of domains ....

              I don't know if this is something you're interested in BBCan, but if you are shallalist (and a few others) are pretty decently maintained lists for blocking porn and a few other categories. They work really well with pfBNG & DNSBL.

              The ways to get them working with DNSBL are kind of rudimentary and obscure right now, if you were to implement a built in way to use them I think it would be extremely popular.

              Squid is just to flaky and invasive on HTTP/S to be useful for stuff like blocking porn. pfBNG just works, well.

              future build of pfblockerng will have option to use shallalist/UT1/squidblacklist

              @BBcan177 is working on it, this feature is in beta right now, i personally don't feel the need of squidguard anymore.

              1 Reply Last reply Reply Quote 0
              • P
                pfBasic Banned
                last edited by

                That is awesome! I love BBCan's work!

                1 Reply Last reply Reply Quote 0
                • S
                  seanpruitt
                  last edited by

                  That is awesome. I was able to get the shalllist to work by following these instructions >> https://forum.pfsense.org/index.php?topic=120072.0#msg664172
                  It doesn't block out everything but it seems to be working better then squid guard. I feel with pfBlock, blocking serveral sites manually, forcing google restricted search, and keeping and eye on squid proxy logs is the best way to go. I've tried SquidGuard and I always found my self thinking is this thing even working!!! There are people that live by SquidGuard but I spent weeks trying to get basic settings to work. PfBlockerNG worked immediatley with results I can count on. Feel like I'm on an infomercial here.

                  Thanks guys for all of your help on this!  :)

                  1 Reply Last reply Reply Quote 0
                  • S
                    seanpruitt
                    last edited by

                    So I'm blocking porn, that's great! But the problem I'm running into now is I can't watch any howto videos on youtube because the host is forcing restricted mode. Is there a way to only for kids into restricted mode vs the entire network?

                    1 Reply Last reply Reply Quote 0
                    • D
                      doktornotor Banned
                      last edited by

                      @seanpruitt:

                      So I'm blocking porn, that's great! But the problem I'm running into now is I can't watch any howto videos on youtube because the host is forcing restricted mode.

                      Perhaps try some other site for p0rn howtos?  :P

                      1 Reply Last reply Reply Quote 1
                      • P
                        pfBasic Banned
                        last edited by

                        @seanpruitt:

                        So I'm blocking porn, that's great! But the problem I'm running into now is I can't watch any howto videos on youtube because the host is forcing restricted mode. Is there a way to only for kids into restricted mode vs the entire network?

                        The easiest way is to get another AP for the kids and put it on a separate interface/subnet. Then just apply all of this stuff to that subnet only.
                        A work around would be to connect to a VPN on the computer you are using (unless you are effectively blocking VPN IP's with a list).

                        1 Reply Last reply Reply Quote 1
                        • T
                          thatmakesnoSense
                          last edited by

                          @someuser123:

                          future build of pfblockerng will have option to use shallalist/UT1/squidblacklist

                          @BBcan177 is working on it, this feature is in beta right now, i personally don't feel the need of squidguard anymore.

                          Hi,

                          from which build on the option shallalist will be available in pfblockerng? I can not find it in the current version (2.1.2 - under pfSense 2.4.0 release).

                          Regards

                          1 Reply Last reply Reply Quote 0
                          • A
                            Albertopfsense
                            last edited by

                            good morning
                            at this moment shalla list used as dnbl  feed list into dnsbl not block ( block only site without www ex block mybadsite.com but forward www.mybadsite.com)

                            someone has found a solution ?

                            thanks Alberto

                            1 Reply Last reply Reply Quote 0
                            • BBcan177B
                              BBcan177 Moderator
                              last edited by

                              Enable the "TLD" option… Click on the blue infoblock icon for more details about TLD...

                              "Experience is something you don't get until just after you need it."

                              Website: http://pfBlockerNG.com
                              Twitter: @BBcan177  #pfBlockerNG
                              Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                              1 Reply Last reply Reply Quote 0
                              • K
                                kejianshi
                                last edited by

                                I've found over the years that trying to block porn is a losing battle.  Short of white listing or unplugging the internet…

                                1 Reply Last reply Reply Quote 0
                                • A
                                  Albertopfsense
                                  last edited by

                                  good morning all

                                  there are some news for use dnsbl as content filter
                                  ex with shalla dbase as dicussuion in this post ?

                                  thanks again Alberto

                                  1 Reply Last reply Reply Quote 0
                                  • K
                                    kaushal7007
                                    last edited by

                                    @someuser123:

                                    try adding new porn blacklist
                                    https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/porn/hosts

                                    you can read more about it here: https://github.com/StevenBlack/hosts

                                    thanks for this,

                                    i wanted to setup with my existing SquidGuard Proxy Filter.    (Currently using http://www.shallalist.de/Downloads/shallalist.tar.gz)

                                    regards,
                                    kaushal

                                    1 Reply Last reply Reply Quote 0
                                    • C
                                      chuane
                                      last edited by

                                      Hello
                                      with shallalist I filter domains whitout www, but when i tried same domains with www prefix, doesn't work.
                                      Any ideas?
                                      Thanks

                                      BBcan177B 1 Reply Last reply Reply Quote 0
                                      • BBcan177B
                                        BBcan177 Moderator @chuane
                                        last edited by

                                        @chuane said in PfBlockerNG Not Blocking Porn:

                                        with shallalist I filter domains whitout www, but when i tried same domains with www prefix, doesn't work.

                                        You will need to enable the "TLD" option, otherwise it will only block the domain that is listed in the Feed, and not block all Sub-domains.

                                        A Force Reload - DNSBL will need to be run for it to take effect.

                                        "Experience is something you don't get until just after you need it."

                                        Website: http://pfBlockerNG.com
                                        Twitter: @BBcan177  #pfBlockerNG
                                        Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                                        1 Reply Last reply Reply Quote 0
                                        • C
                                          chuane
                                          last edited by

                                          Thanks for response!
                                          I have this option checked, but It doesn't work.
                                          Same problem.

                                          1 Reply Last reply Reply Quote 0
                                          • C
                                            chuane
                                            last edited by

                                            Hello.
                                            I found the problem.
                                            I see this here https://forum.netgate.com/topic/102967/pfblockerng-v2-1-w-tld

                                            TLD Domain Limit Restrictions:
                                            < 1.0GB RAM - Max 100k Domains
                                            < 1.5GB RAM - Max 150k Domains
                                            < 2.0GB RAM - Max 200k Domains
                                            < 2.5GB RAM - Max 250k Domains
                                            < 3.0GB RAM - Max 400k Domains
                                            < 4.0GB RAM - Max 600k Domains
                                            < 5.0GB RAM - Max 1.0M Domains
                                            < 6.0GB RAM - Max 1.5M Domains
                                            < 7.0GB RAM - Max 2.5M Domains
                                            > 7.0GB RAM - > 2.5M Domains

                                            Thanks

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.