Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    DNSBL modify default bloked webpage

    Scheduled Pinned Locked Moved pfBlockerNG
    45 Posts 12 Posters 20.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • RonpfSR
      RonpfS @rjabellax5
      last edited by RonpfS

      @rjabellax5 said in DNSBL modify default bloked webpage:

      Do ihave to uninstall the pfBlockerNG package and replace it with pfBlockerNG-devel?

      Yes you have to uninstall first.

      Also, The pfBlockerNG-devel under 2.4.4 has issues with PHP, so 2.4.3 max.

      @rjabellax5 said in DNSBL modify default bloked webpage:

      I thought its as simple as editing an html file in dnsbl directory.

      It is : Custom block web pages can be added to: /usr/local/www/pfblockerng/www/ folder.

      2.4.5-RELEASE-p1 (amd64)
      Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
      Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

      1 Reply Last reply Reply Quote 0
      • R
        rjabellax5
        last edited by

        Thank you Mr. RonpfS.
        How am i going to do that? do I have to create a new html file for my custom blocked page? or jus edit one of this .php files?0_1532410265111_Capture.PNG

        1 Reply Last reply Reply Quote 0
        • R
          rjabellax5
          last edited by

          or this file ?0_1532410541542_Capture-b.PNG

          1 Reply Last reply Reply Quote 0
          • RonpfSR
            RonpfS
            last edited by RonpfS

            @rjabellax5 said in DNSBL modify default bloked webpage:

            How am i going to do that? do I have to create a new html file for my custom blocked page? or jus edit one of this .php files?

            0_1532415937662_BlockedWebPage.JPG

            2.4.5-RELEASE-p1 (amd64)
            Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
            Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

            R 1 Reply Last reply Reply Quote 0
            • R
              rjabellax5 @RonpfS
              last edited by

              @ronpfs Thank you. Sorry I didnt get that quickly.

              Removed PFBlockerNG and installed devel version, i can now see the blocked webpage option.

              again, thank you.

              1 Reply Last reply Reply Quote 0
              • occamsrazorO
                occamsrazor
                last edited by

                Did you ever manage to enable this option and create a page? Just curious, I'd also like to have.
                Actually what I would like is a basic error page that told me "Blocked by pfBlockerNG using thisparticularfeed"

                pfSense CE on Qotom Q355G4 8GB RAM/60GB SSD
                Ubiquiti Unifi wired and wireless network, APC UPSs
                Mac OSX and IOS devices, QNAP NAS

                RonpfSR 1 Reply Last reply Reply Quote 0
                • RonpfSR
                  RonpfS @occamsrazor
                  last edited by

                  @occamsrazor
                  You can copy the default file and modify it to your taste.
                  Or create you own html file.

                  2.4.5-RELEASE-p1 (amd64)
                  Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
                  Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

                  1 Reply Last reply Reply Quote 0
                  • occamsrazorO
                    occamsrazor
                    last edited by

                    I found and downloaded the default page in /usr/local/www/pfblockerng/www/
                    What I'm realising now is I am never seeing this default block page at all (this was same for me pre -devel version), I just get a timeout.

                    0_1535777030328_Screen Shot 2018-09-01 at 07.34.04.jpg

                    A ping from client machine to the blocked address confirms it is being redirected to 10.10.10.1

                    pfSense CE on Qotom Q355G4 8GB RAM/60GB SSD
                    Ubiquiti Unifi wired and wireless network, APC UPSs
                    Mac OSX and IOS devices, QNAP NAS

                    RonpfSR 1 Reply Last reply Reply Quote 0
                    • RonpfSR
                      RonpfS @occamsrazor
                      last edited by

                      @occamsrazor That a page you get when you access a blocked domain name directly : http://js.agkn.com
                      In case of an image URL you get a 1x1gif page, for a .js you get another page, etc

                      2.4.5-RELEASE-p1 (amd64)
                      Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
                      Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

                      occamsrazorO 1 Reply Last reply Reply Quote 1
                      • occamsrazorO
                        occamsrazor @RonpfS
                        last edited by

                        @ronpfs said in DNSBL modify default bloked webpage:

                        @occamsrazor That a page you get when you access a blocked domain name directly : http://js.agkn.com
                        In case of an image URL you get a 1x1gif page, for a .js you get another page, etc

                        When I ping that address it's clearly being blocked
                        ping js.agkn.com
                        PING js.agkn.com (10.10.10.1): 56 data bytes

                        But when I try to access the example you gave http://js.agkn.com in a web browser no page ever loads, just a timeout.

                        pfSense CE on Qotom Q355G4 8GB RAM/60GB SSD
                        Ubiquiti Unifi wired and wireless network, APC UPSs
                        Mac OSX and IOS devices, QNAP NAS

                        RonpfSR 1 Reply Last reply Reply Quote 0
                        • RonpfSR
                          RonpfS @occamsrazor
                          last edited by

                          @occamsrazor said in DNSBL modify default bloked webpage:

                          But when I try to access the example you gave http://js.agkn.com in a web browser no page ever loads, just a timeout.

                          Do you get something from http://10.10.10.1/

                          2.4.5-RELEASE-p1 (amd64)
                          Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
                          Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

                          occamsrazorO 1 Reply Last reply Reply Quote 0
                          • occamsrazorO
                            occamsrazor @RonpfS
                            last edited by

                            @ronpfs said in DNSBL modify default bloked webpage:

                            Do you get something from http://10.10.10.1/

                            No, just a "Waiting for......" in the bottom of the browser screen and page never loads.

                            pfSense CE on Qotom Q355G4 8GB RAM/60GB SSD
                            Ubiquiti Unifi wired and wireless network, APC UPSs
                            Mac OSX and IOS devices, QNAP NAS

                            RonpfSR BBcan177B 2 Replies Last reply Reply Quote 0
                            • RonpfSR
                              RonpfS @occamsrazor
                              last edited by

                              @occamsrazor Under Firewall / NAT / Port Forward You should have NAT entries pointing to the VIP.

                              Did you enable Permit Firewall Rules under Firewall / pfBlockerNG / DNSBL ? Do you see those Rules under Firewall / Rules

                              2.4.5-RELEASE-p1 (amd64)
                              Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
                              Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

                              occamsrazorO 1 Reply Last reply Reply Quote 1
                              • occamsrazorO
                                occamsrazor @RonpfS
                                last edited by occamsrazor

                                @ronpfs said in DNSBL modify default bloked webpage:

                                @occamsrazor Under Firewall / NAT / Port Forward You should have NAT entries pointing to the VIP.

                                Did you enable Permit Firewall Rules under Firewall / pfBlockerNG / DNSBL ? Do you see those Rules under Firewall / Rules

                                That check box was not enabled. I've enabled it now, restarted router and client machine, and see the rules under Floating:

                                0_1535783519446_Screen Shot 2018-09-01 at 09.30.00.jpg

                                But still don't get any response from http://10.10.10.1/ or that domain you posted.

                                pfSense CE on Qotom Q355G4 8GB RAM/60GB SSD
                                Ubiquiti Unifi wired and wireless network, APC UPSs
                                Mac OSX and IOS devices, QNAP NAS

                                1 Reply Last reply Reply Quote 0
                                • occamsrazorO
                                  occamsrazor
                                  last edited by occamsrazor

                                  Aha... I notice the pfB_DNSBL_Ports alias refers to ports 8081 and 8043 only. When I type http://10.10.10.1:8081/ in the browser I get a response:

                                  0_1535783772175_Screen Shot 2018-09-01 at 09.35.48.jpg

                                  But even if I manually add port 80 to the pfB_DNSBL_Ports alias it doesn't give me that page when going to http://10.10.10.1

                                  pfSense CE on Qotom Q355G4 8GB RAM/60GB SSD
                                  Ubiquiti Unifi wired and wireless network, APC UPSs
                                  Mac OSX and IOS devices, QNAP NAS

                                  RonpfSR 1 Reply Last reply Reply Quote 0
                                  • RonpfSR
                                    RonpfS @occamsrazor
                                    last edited by

                                    @occamsrazor The NAT should take care of redirecting port 80 and 443.

                                    2.4.5-RELEASE-p1 (amd64)
                                    Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
                                    Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

                                    occamsrazorO 1 Reply Last reply Reply Quote 0
                                    • occamsrazorO
                                      occamsrazor @RonpfS
                                      last edited by

                                      @ronpfs said in DNSBL modify default bloked webpage:

                                      @occamsrazor The NAT should take care of redirecting port 80 and 443.

                                      I see a corresponding port-forward in Firewall > NAT Port > Forward but it doesn't seem to be working:

                                      0_1535788815551_Screen Shot 2018-09-01 at 10.57.46.jpg

                                      pfSense CE on Qotom Q355G4 8GB RAM/60GB SSD
                                      Ubiquiti Unifi wired and wireless network, APC UPSs
                                      Mac OSX and IOS devices, QNAP NAS

                                      1 Reply Last reply Reply Quote 0
                                      • BBcan177B
                                        BBcan177 Moderator
                                        last edited by

                                        @occamsrazor

                                        Make sure that your LAN devices DNS settings are only set to pfSense, and not any other DNS server or else that will bypass DNSBL.

                                        "Experience is something you don't get until just after you need it."

                                        Website: http://pfBlockerNG.com
                                        Twitter: @BBcan177  #pfBlockerNG
                                        Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                                        occamsrazorO 1 Reply Last reply Reply Quote 0
                                        • occamsrazorO
                                          occamsrazor @BBcan177
                                          last edited by

                                          @bbcan177 said in DNSBL modify default bloked webpage:

                                          @occamsrazor

                                          Make sure that your LAN devices DNS settings are only set to pfSense, and not any other DNS server or else that will bypass DNSBL.

                                          They all use pfsense as DNS server (Resolver with forwarding) and I have rule to block DNS going elsewhere:

                                          DHCP Server DNS settings:

                                          0_1535865286907_DHCP server.jpg

                                          Redirect any other DNS requests to pfSense

                                          0_1535865320375_Port Forward.jpg

                                          NAT settings

                                          0_1535865368285_NAT settings.jpg

                                          LAN Rules

                                          0_1535865402314_Rules.jpg

                                          The things is DNSBL IS working.... as bad domains are resolving to 10.10.10.1 in terms of DNS - it's just I am not getting the redirect webpage at 10.10.10.1

                                          pfSense CE on Qotom Q355G4 8GB RAM/60GB SSD
                                          Ubiquiti Unifi wired and wireless network, APC UPSs
                                          Mac OSX and IOS devices, QNAP NAS

                                          BBcan177B 1 Reply Last reply Reply Quote 0
                                          • BBcan177B
                                            BBcan177 Moderator @occamsrazor
                                            last edited by

                                            @occamsrazor said in DNSBL modify default bloked webpage:

                                            The things is DNSBL IS working.... as bad domains are resolving to 10.10.10.1 in terms of DNS - it's just I am not getting the redirect webpage at 10.10.10.1

                                            That blocked page only shows when the root domain is blocked. It won't show when it blocks an AD or a sub-domain.

                                            "Experience is something you don't get until just after you need it."

                                            Website: http://pfBlockerNG.com
                                            Twitter: @BBcan177  #pfBlockerNG
                                            Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                                            occamsrazorO 1 Reply Last reply Reply Quote 1
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.