Looks lke its " working ...

[VenimK]

DHCP WAN

So Should i change PFBLOCKER IP to 10.10.10.1 again, then, reboot server ..

[Gertjan]

So, the default 192.168.1.0/24 should be fine for LAN setting - the default DHCP pool also.

@VenimK said in Looks lke its " working ...:

So Should i change PFBLOCKER IP to 10.10.10.1 again, then, reboot server ..

Noop.
You'll be breaking a condition :

Check also the last condition :
192.168.0.0/16 (your 192.168.1.1) is in the range of this setting, and your WAN is in that range.
Go for a 172.16.0.1 as a DNSBL Virtual IP setting.

[VenimK]

@Gertjan

Changed DNSBL VIP to 172.16.0.1
GEOIP is working but none of the other

[Gertjan]

Take an URL from a feed the first alias "pfB_DNSBLIP_v4".
Feed that into a local "nslookup" prompt.
Have it resolved.
Did it return the real IPv4 - or the one from pfBlockerNG ? (like 0.0.0.1 or your local "DNSBL Webserver Configuration / Virtual IP Address ?

[VenimK]

@Gertjan said in Looks lke its " working ...:

pfB_DNSBLIP_v4

Weird , going to 192.168.1.1

[Gertjan]

@VenimK said in Looks lke its " working ...:

Weird , going to 192.168.1.1

That's your ""DNSBL Webserver Configuration / Virtual IP Address".

[VenimK]

@Gertjan said in Looks lke its " working ...:

That's your ""DNSBL Webserver Configuration / Virtual IP Address".

[Gertjan]

and you did that also ?

[VenimK]

@Gertjan
Yes
And rebooted to

[VenimK]

@Gertjan said in Looks lke its " working ...:

and you did that also ?

Maybe a reinstall off the plugin

[Gertjan]

Don't think so.
A Force reload does it for me.

[VenimK]

@Gertjan
NOw when i do nslookup from a client if get
nslookup www.upcoin.com
Server: 10.10.10.1 (PFSENSE LAN IP
Address: 10.10.10.1#53

Name: www.upcoin.com
Address: 172.16.0.1 (DNSBL IP)

So it kinda works
But i get still no logs

[VenimK]

@VenimK
did a complete new install pfsense, and then pfblocker-dev.
And it still works as before, no loggin with DNSBL.
Allthough nslookup looks ok, and stuff
nslookup www.yahoo.com
Server: 10.10.10.1
Address: 10.10.10.1#53

Name: www.yahoo.com
Address: 10.10.10.1

[Gertjan]

What is your "DNSBL Webserver Configuration Virtual IP Address " now ?
What is your pfSense LAN IP now ?

[VenimK]

@Gertjan
LAN INFO

DNSBL INFO

[Gertjan]

Looks all fine to me.

[VenimK]

@Gertjan

Only pfb_TOP get logged ??

[Gertjan]

Be happy about it.
it means you're not looking at web pages that (try to) include links to sits that are blocked.
It's as simple as that.

Simply said : when you're looking for pub/scam/blacklisted-pages there is no need to block them.
Because you're not visiting them.
So, there is nothing to block ^^

[VenimK]

@Gertjan
Great, it works now

IPblock and DNSBL.

Had to change the NAT rulez
instead of 127.0.0.1 to 10.10.10.1

[Gertjan]

The webserver being used by pfBlockerNG is listening to :

[2.4.4-RELEASE][admin@pfsense.brit-hotel-fumel.net]/root: sockstat -4l | grep 'lighttpd_p'
root     lighttpd_p 33889 4  tcp4   *:8081                *:*
root     lighttpd_p 33889 5  tcp4   *:8443                *:*
root     lighttpd_p 33889 6  tcp4   10.10.10.1:443        *:*

all interfaces, which includes "localhost" or 127.0.0.1

This is probably not stated for nothing :