bbcan177 Is your MS1 Block list still valid?
-
I had what I believe as a false positive in your MS1 list, and I was wondering if this list should still be considered valid?
If you find my post useful, please give it a thumbs up!
pfSense 2.7.2-RELEASE -
No "MS1" here Firewall > pfBlockerNG > Feeds.
Also : the feeds listed here Firewall > pfBlockerNG > Feeds are just examples.
They are created and maintained by their owners, totally non-related to "pfBlockerNG".
So, if you have a issue with this "MS1", contact the owner. -
The reason I posted this here is BBCAN177 is the author or the feed, so he should know if I should stop using it.
@gertjan said in Is your MS1 Block list still valid?:
No "MS1" here Firewall > pfBlockerNG > Feeds.
Also : the feeds listed here Firewall > pfBlockerNG > Feeds are just examples.
They are created and maintained by their owners, totally non-related to "pfBlockerNG".
So, if you have a issue with this "MS1", contact the owner. -
@guardian
One IP? You could help and post it. I use the list w/o issue. I'd just whitelist the entry and move on. -
@provels said in bbcan177 Is your MS1 Block list still valid?:
@guardian
One IP? You could help and post it. I use the list w/o issue. I'd just whitelist the entry and move on.If the IP address is OK, then I can certainly override it for myself, but I like to do my part to help the community by reporting things.
The IP address in question is: 69.156.240.29 which is owned by the web hosting division of Bell Canada (likely a shared IP address, but I don't know). The website that I was trying to access was https://www.eyephoria.ca/ which is a small independent business - likely not a highly skilled web developer behind it. I was able to access the web site though a VPN which bypasses the firewall.
IIUC the list isn't updated very often. I suspect that their may have been a problem in the past, but I'm not sure of the criteria for including an IP on the list or how to determine if conditions have changed.
If you find my post useful, please give it a thumbs up!
pfSense 2.7.2-RELEASE -
Now that the real question is known, the real answer shows up :
@guardian said in bbcan177 Is your MS1 Block list still valid?:
.... in your MS1 list, and I was wondering if this list should still be considered valid?
First of all, it's not "MS1", but :
The IP 69.156.240.29 is part of MS_1_v4 list, which is also called the PRI5 "PRI5 - Collection of Feeds from Fifth Tier providers.".
The IP is most probably a shared IP used for many web sites. Very common for shared hosting.
Whitelist 69.156.240.29 and you' re good. Just be aware that there are probably more websites hiding behind that are malicious.
-
@guardian
Perhaps the site operator should be contacting these guys directly to find out why they are blocked and then use that info to have their site relo'd to a different IP? My company was blacklisted back in the day and we had to go to the listor to fix it. Even then it took a while to get it out of cached lists.
-
@provels said in bbcan177 Is your MS1 Block list still valid?:
My company was blacklisted back in the day ....
I presume the IP it was using, not your domain name ^^
The one and only reasons I left shared hosting : your own IPv4 (IPv6).
Also, you don't want your mail being sent from a "collective garbage bin" neither.
A small <5 $ / month will do.
