Vlans being blocked
-
Awesome package!! I have been using it for awhile now and I almost know how to use it.
I have some lists that I need to block on the lan(no vlan), dom (vlan) web(vlan) but I do not want to block gam(vlan) and vpn(vlan).
the lan is on its own 10gbe nic while the vlan all reside on another 10gbe nic. I do not have any more pci slots to add more nics.
The issue is that when I enable pfblockerng and dnsbl on the dom and web vlan, it also blocks the gam and vpn vlans even though I have not selected them. I have temporary changed the dns for the gam and vpn vlans to a dns server different than the what the dns resolver uses to prevent this.
I was under the understanding that the option of selecting the "DNSBL Firewall Rule" would allow blocking on some subnets but not others.
also, I have had this setup for awhile on 1gbe nic without any issues, it is only when I upgraded to 10gbe and rebuilt the firewall that I have had this issue. before everything worked fine.
-
The only way to bypass DNSBL is to define a different DNS server for those specific lan segments.
The DNSBL permit rule is used to allow those other lan segments to talk to the DNSBL webserver. Otherwise, those other lan segments could timeout waiting for the DNSBL webserver to reply.
-
OK, I got it… thanks for clarifying that for me.