How to schedule PfBlockerNG?
-
Dear @nogbadthebad ,
Is there any way to do it?
For instance: If I can create on copy of config file which contains disable/unbound of desired DNSBL group than I can restart the ubound and dnsbl server from code and Add this code in the cron?
This method works good but I could not find the config file to describe diseble/unbound of desired dnsbl group?I want to simulate select the "disable" group and restart the servers from GUI with the code in the cron.
Where can I find the config file of (disable or unbound choice?) DNSBL group?
Regards,
Mucip:) -
Dear @bartkowski ,
Can you describe little bit more please? because I could not see anything about schedule in PfBlockNG GUI.Regards,
Mucip:) -
PfBlockerNG can't help you out here.
It's a tool that blocks list with IP's and/or hostnames from which you do not want to 'request' anything. Now now, and not tomorrow.It's has no ambition to act like a "parental control" tool, like "Twitter in the afternoon, but not during the evening and night".
-
@gertjan ,
If we can change the config file and restart the server via cron script, why not?. :)
I think I must go deeper in the PfBlockerNG mechanism.Regards,
Mucip:) -
@mucip What exactly are you blocking via DNSBL ?
-
Hi @nogbadthebad ,
Some social sites.Regards,
Mucip:) -
@mucip Can you block them via pfBlockerNG -> IP -> IPv4 and create an alias using the ASN number.
You could if its Facebook.
You then could have a time based firewall rule.
-
Dear @nogbadthebad ,
Could you explain little bit more please?
Because in my PfBlocker GUI there is only "pfBlockerNG -> IPv4 " menu. And I could not understand what is ASN?...P.S. By the way I do this limitations with SquidFilter before but I could not find this package in the PfSense anymore?
Regards,
Mucip:) -
https://en.wikipedia.org/wiki/Autonomous_system_(Internet)
You could then use pfB_FACEBOOK_v4 in a firewall rule and set a schedule, you'd need to remove Facebook from your DNSBL config.
-
Hi @nogbadthebad ,
What is your version of the PfBlockerNG?
Looks different than mine.Regards,
Mucip:) -
@mucip pfBlockerNG-devel
-
You'd then need to create two rules, one that passes traffic to the alias with the time schedule and one that denies without a schedule.
I only use a schedule to throttle traffic out my GUEST interface monday - friday 9AM to 5PM to the internet.
-
Hi @nogbadthebad ,
Thanks a lot.
Well I need to upgrade to DEVEL than.
By the way where can I find the complete ASN list. How do you know that Facebook ASN is 92934 e.g.?Regards,
Mucip:) -
@mucip You can type in Facebook in the IPv4 Source Definitions part.
-
Dear @nogbadthebad ,
Asolutelly I have to upgrade to DEVEL than. :)Regards,
Mucip:)
