PfblockerNG 2.0.17 woes

[pftdm007]

Hello all,

Since I upgraded to latest version of pfblockerNG and pfsense I noticed pfblockerNG no longer works as it should.

First issue (to be confirmed it is):
I am pretty sure I had several aliases under ipv4 and each alias had several lists.  Now I just noticed that all lists are grouped under a single alias and most of the lists have the same identifiers (or whatever the last column on the right is used for).  Since I am not 100% sure the lists were separated in multiple aliases I cannot confirm this as an issue but I wonder if this will work???

Second issue:
I am also using DNSBL, I managed to create several feeds each pointing to a text file stored on a remote server on LAN.  pfblockerNG does not report problems to retrieve these lists.  The issue is that in my lists I am using web adresses without the "www." part.  For example

oracle.com
instagram.com
pinterest.com
virtualbox.com
dailymail.co.uk
liveleak.com
somalinet.com

If I remember correctly, I had to truncate the "www." otherwise pfblockerNG wouldn't work with the adresses.  Anyways now, pfblockerNG blocks the sites, but if I add the "www." part in the browser's address bar, the website is no longer blocked by pfblockerNG.

For example, in one feed I have "facebook.com".  If I enter "facebook.com" in a web browser, I get a blank page with a single white pixel at the center (I assume pfblockerNG works).  If I enter "www.facebook.com", it just loads no problem.  I confirm this is true for everything in my feeds.  I tried adding an entry such as "www.facebook.com" in my feed source, but I still can access the site.

Third issue:
There are a few sites in my DNSBL feeds that I can access although they are in my DNSBL feeds.  For example pinterest.com even if it is added in my feeds as "pinterest.com".

I am not sure how to debug this or if this is due to misconfig or a corruption between upgrades??

[BBcan177]

Ensure that you are using a unique Header/Label for each List in the IPv4 tab.

DNSBL will block only the listed Domain, and not any Sub-Domains… So if www.example.com is listed, then that is what gets blocked, and not example.com (and vice-versa)....

The new pending 2.1.1 version will have TLD feature which will allow for the blocking of the entire Domain/Sub-Domains...

See this thread:
https://forum.pfsense.org/index.php?topic=115357.0

[pftdm007]

BBCan177 you're quick to reply!!!  THanks!

Yes I have modified the headers/labels (thats the name I was searching for…) to be unique ones.

Is it just normal for me to find all my lists under a single Alias named "CustomBlockedLists"??  I really do not remember to have merged everything like that, unless I was drunk?  :o

Looking forward to the TLD feature in pfblockerNG!!  This will save us from entering multiple domains, and simplify things...

Thanks again!