Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Custom aliases using domain name

    Scheduled Pinned Locked Moved Off-Topic & Non-Support Discussion
    32 Posts 5 Posters 4.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • KOMK
      KOM @Su30MKI
      last edited by

      This post is deleted!
      S 1 Reply Last reply Reply Quote 0
      • S
        Su30MKI @KOM
        last edited by

        @kom Thank you.. But I am not going to block it with the DNS IP address but with the DNS name.

        1 Reply Last reply Reply Quote 0
        • S
          Su30MKI
          last edited by

          @nogbadthebad Thank you for the wonderful representation. I am so happy for your effort. Can I assign host based blocking in the network with this method?

          NogBadTheBadN 1 Reply Last reply Reply Quote 0
          • S
            Su30MKI
            last edited by

            @youngsand1 Hi.. Thank you for showing your support. I created an alias with the url. But it is not blocking.0_1542913389436_Facebook-Alias.PNG

            1 Reply Last reply Reply Quote 0
            • KOMK
              KOM
              last edited by

              This post is deleted!
              1 Reply Last reply Reply Quote 0
              • NogBadTheBadN
                NogBadTheBad @Su30MKI
                last edited by

                @su30mki said in Custom aliases using domain name:

                @nogbadthebad Thank you for the wonderful representation. I am so happy for your effort. Can I assign host based blocking in the network with this method?

                Never used it but there's a bit at the bottom:-

                0_1542913706306_Screenshot 2018-11-22 at 19.07.04.png

                I still think you'd be better blocking by AS number.

                Andy

                1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

                S 1 Reply Last reply Reply Quote 1
                • S
                  Su30MKI
                  last edited by

                  This post is deleted!
                  1 Reply Last reply Reply Quote 0
                  • S
                    Su30MKI @NogBadTheBad
                    last edited by Su30MKI

                    @nogbadthebad I understand that part. How to create an alias for blocking pfsense by pfblockerng? I am very new to pf blockerng. I also have paid blacklist service. Can I load that to pfblockerng?

                    1 Reply Last reply Reply Quote 0
                    • NogBadTheBadN
                      NogBadTheBad
                      last edited by NogBadTheBad

                      • Instal lpfBlockerNG-devel

                      • Run the setup wizard , define your inbound and outbound interface.

                      • Create a rule Firewall -> pfBlockerNG -> IP -> IPv4 as per my screenshot but set it as deny outbound

                      • Run update via Firewall -> pfBlockerNG -> Update, the firewall rules will automatically be created

                      The rules will automatically be created on the inbound and outbound interfaces, give it a go, its quite easy.

                      0_1542914881999_Screenshot 2018-11-22 at 19.25.49.png

                      Re the paid block list you can, depending on the format, it basically creates tables that are used in firewall rules, check the tables out via Diagnostics -> Tables

                      0_1542915086235_Screenshot 2018-11-22 at 19.31.13.png

                      Andy

                      1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

                      S 1 Reply Last reply Reply Quote 1
                      • S
                        Su30MKI @NogBadTheBad
                        last edited by

                        @nogbadthebad Hello.. Thank you for your support. I am sorry for the delay in the reply. I was doing a whole new set up. I have multi wan failover setup done. So in PfblockerNG, The Inbound interface --> WAN1 & WAN2 and The outbound interface --> LAN. Is it the right method?

                        NogBadTheBadN 1 Reply Last reply Reply Quote 0
                        • NogBadTheBadN
                          NogBadTheBad @Su30MKI
                          last edited by

                          @su30mki

                          Yup sounds right.

                          Andy

                          1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

                          S 1 Reply Last reply Reply Quote 1
                          • S
                            Su30MKI @NogBadTheBad
                            last edited by

                            @nogbadthebad I am having multiple vlans created in pfsense. Then I think the outbound interface should be all the vlans.

                            NogBadTheBadN 1 Reply Last reply Reply Quote 0
                            • NogBadTheBadN
                              NogBadTheBad @Su30MKI
                              last edited by

                              @su30mki

                              Yes.

                              Andy

                              1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

                              S 1 Reply Last reply Reply Quote 1
                              • S
                                Su30MKI @NogBadTheBad
                                last edited by Su30MKI

                                @nogbadthebad Hi, I tried doing it, But it is not blocking facebook. Please find the screenshots.1_1543414765834_IPv4-list-2.PNG 0_1543414765815_IPv4-list1.PNG

                                1 Reply Last reply Reply Quote 0
                                • NogBadTheBadN
                                  NogBadTheBad
                                  last edited by NogBadTheBad

                                  It's deny outbound.

                                  Get it working with ASN numbers they play with the social networking source after.

                                  Andy

                                  1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

                                  1 Reply Last reply Reply Quote 0
                                  • NogBadTheBadN
                                    NogBadTheBad
                                    last edited by NogBadTheBad

                                    I've just tried it and its an issue with your block list as it doesn't contain valid IP addresses just 0.0.0.0 FQDN.

                                    PfB_Test_v4 Table
                                    IP Address
                                    123.41.54.45
                                    130.211.230.53
                                    160.41.54.45
                                    163.41.54.45
                                    194.41.54.45

                                    Rather than using IP try using the DBNS

                                    0_1543416681468_Screenshot 2018-11-28 at 14.50.13.png

                                    Andy

                                    1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

                                    1 Reply Last reply Reply Quote 1
                                    • S
                                      Su30MKI
                                      last edited by

                                      Can you please suggest any list?

                                      NogBadTheBadN 1 Reply Last reply Reply Quote 0
                                      • NogBadTheBadN
                                        NogBadTheBad @Su30MKI
                                        last edited by

                                        @su30mki

                                        Have you tried blocking facebook by ASN numbers or like I suggested try the using the list your using in the DBNSL section as per my screenshot.

                                        Andy

                                        1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

                                        S 1 Reply Last reply Reply Quote 0
                                        • S
                                          Su30MKI @NogBadTheBad
                                          last edited by

                                          @nogbadthebad Thank you very much.. It is working. Saved my reputation.

                                          NogBadTheBadN 1 Reply Last reply Reply Quote 0
                                          • NogBadTheBadN
                                            NogBadTheBad @Su30MKI
                                            last edited by

                                            @su30mki said in Custom aliases using domain name:

                                            @nogbadthebad Thank you very much.. It is working. Saved my reputation.

                                            via IP and ASN number or DNSBL ?

                                            Andy

                                            1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

                                            S 1 Reply Last reply Reply Quote 1
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.