PfBlockerNG w/ DNSBL > Squid(+Guard) for Content Filtering?
-
Hi All
I have been looking at this and have hit a problem i hope you can help me with. If i enter in a browser for example youporn.com it will be blocked as expected but if i enter www.youporn.com it is not blocked. I have tested this on multiple sites with the same result.
Is it posible to include the www without editing the block list by hand.Thanks
-
Hi All
I have been looking at this and have hit a problem i hope you can help me with. If i enter in a browser for example youporn.com it will be blocked as expected but if i enter www.youporn.com it is not blocked. I have tested this on multiple sites with the same result.
Is it posible to include the www without editing the block list by hand.Thanks
You will need to enable the TLD option. Otherwise only the listed domains are blocked. Will need to run a Force Reload-DNSBL for it to take effect.
-
Keep in mind that TLD needs a lot of RAM. It's dependent on the number of hosts you have blocked in your lists. I have 8GB RAM and TLD used it all then my system crashed, maybe someday I'll throw some more RAM in there.
-
The pkg has limits on how many domains are processed via TLD. So it should have prevented the unbound memory exhaustion issue. If it's reproducible let me know and I may tweak the limits. The more details the better.
-
Thanks for the help, but enabling TLD on my meager system has limited results because of the table size. Looks like i will
have to return to squid/squidgaurd. -
Thanks for the help, but enabling TLD on my meager system has limited results because of the table size. Looks like i will
have to return to squid/squidgaurd.Sorry nothing I can control as Unbound creates pointers and uses more memory. Maybe it's time to upgrade. :)
-
Just reading this and i wonder about the RAM.
I have 2GB and TLD enabled in DNSBL and pfSense says "Memory usage 26% of 2013 MiB".I have 10 host sources in DNSBL Feeds and EasyList enabled. So how can 8GB be not enough?
Is there a place I didn't see yet where i see how many domains are blocked?
Something like what you see if you update? -
I don't think that TLD alone was the reason my system crashed. I also use ZFS and RAM disk. I have probably about ten lists as well but a couple of them have a LOT of domains.
I think TLD worked as it was supposed to but since I'm using RAM disk and ZFS I don't think the system appreciated such a small amount of RAM available and gave it up.I might try enabling it again to see what happens later and report back. But at this point I don't really need TLD. When I do I'll just add more RAM so that I have enough for all of my domains.
-
The blue infoblock for TLD will indicate recommended RAM requirements. You can review the pfblockerng.log in the Update tab window during any manual force runs. Or review the log in the Log browser tab. The that log will show stats per download and also the TLD stats after all DNSBL feeds have been downloaded and processed.
-
@mrglasspoole hi;
I had to turn off ipv6 which i don't use(ignored in linux) and this is on a dual core AMD APU with 4 gigs.
I also have issues with abuse list at first before killing ipv6 in pf latest and running out of ram issue.
but at least it tells you and shuts down.
but would like the caching squid had and av.
