DNSBL Not Blocking Ads or Yahoo

kidseven112002 · Dec 27, 2017, 5:32 PM

Can't seem to get DNSBL working properly; configs attached. Pulled the updated ad list that isn't working nor is my yahoo.com custom list working. Please review and let me know what I'm doing wrong.
![Screen Shot 2017-12-27 at 6.15.08 PM.png](/public/imported_attachments/1/Screen Shot 2017-12-27 at 6.15.08 PM.png)
![Screen Shot 2017-12-27 at 6.15.08 PM.png_thumb](/public/imported_attachments/1/Screen Shot 2017-12-27 at 6.15.08 PM.png_thumb)
![Screen Shot 2017-12-27 at 6.15.21 PM.png](/public/imported_attachments/1/Screen Shot 2017-12-27 at 6.15.21 PM.png)
![Screen Shot 2017-12-27 at 6.15.21 PM.png_thumb](/public/imported_attachments/1/Screen Shot 2017-12-27 at 6.15.21 PM.png_thumb)
![Screen Shot 2017-12-27 at 6.17.57 PM.png](/public/imported_attachments/1/Screen Shot 2017-12-27 at 6.17.57 PM.png)
![Screen Shot 2017-12-27 at 6.17.57 PM.png_thumb](/public/imported_attachments/1/Screen Shot 2017-12-27 at 6.17.57 PM.png_thumb)
![Screen Shot 2017-12-27 at 6.18.13 PM.png](/public/imported_attachments/1/Screen Shot 2017-12-27 at 6.18.13 PM.png)
![Screen Shot 2017-12-27 at 6.18.13 PM.png_thumb](/public/imported_attachments/1/Screen Shot 2017-12-27 at 6.18.13 PM.png_thumb)
![Screen Shot 2017-12-27 at 6.18.44 PM.png](/public/imported_attachments/1/Screen Shot 2017-12-27 at 6.18.44 PM.png)
![Screen Shot 2017-12-27 at 6.18.44 PM.png_thumb](/public/imported_attachments/1/Screen Shot 2017-12-27 at 6.18.44 PM.png_thumb)

BBcan177 · Dec 27, 2017, 11:06 PM

Settings look ok… Are you sure that your LAN devices have their DNS settings configured to use pfSense DNS Only? If you have other DNS Servers configured then it will bypass DNSBL.

From pfSense you can confirm that a domain is blocked via:

host -t A example.com

And on Windows use a```
nslookup example.com


If the Domain is filtered via DNSBL, it will reply with the DNSBL VIP Address that you configured.

kidseven112002 · Jan 4, 2018, 5:59 PM

Thanks for the config verification, but still no go. Should my host DNS be set to the 10.10.10.1 address? I have them pulling the DNS from pfsense DHCP. Still no luck…

RonpfS · Jan 4, 2018, 9:44 PM

Your host has to use pfsense+DNSBL DNS Resolver service.
From a PC I get

C:\Users\User1>nslookup steepto.com
Server :   pfsense.local
Address:  172.xx.xxx.254

Nom :    steepto.com
Address:  10.10.10.1

kidseven112002 · Jan 4, 2018, 9:23 PM

That was it!! Thank you ;D