PfblockerNG 2.0.17 woes
pftdm007 last edited by
Since I upgraded to latest version of pfblockerNG and pfsense I noticed pfblockerNG no longer works as it should.
First issue (to be confirmed it is):
I am pretty sure I had several aliases under ipv4 and each alias had several lists. Now I just noticed that all lists are grouped under a single alias and most of the lists have the same identifiers (or whatever the last column on the right is used for). Since I am not 100% sure the lists were separated in multiple aliases I cannot confirm this as an issue but I wonder if this will work???
I am also using DNSBL, I managed to create several feeds each pointing to a text file stored on a remote server on LAN. pfblockerNG does not report problems to retrieve these lists. The issue is that in my lists I am using web adresses without the "www." part. For example
oracle.com instagram.com pinterest.com virtualbox.com dailymail.co.uk liveleak.com somalinet.com
If I remember correctly, I had to truncate the "www." otherwise pfblockerNG wouldn't work with the adresses. Anyways now, pfblockerNG blocks the sites, but if I add the "www." part in the browser's address bar, the website is no longer blocked by pfblockerNG.
For example, in one feed I have "facebook.com". If I enter "facebook.com" in a web browser, I get a blank page with a single white pixel at the center (I assume pfblockerNG works). If I enter "www.facebook.com", it just loads no problem. I confirm this is true for everything in my feeds. I tried adding an entry such as "www.facebook.com" in my feed source, but I still can access the site.
I am not sure how to debug this or if this is due to misconfig or a corruption between upgrades??
Ensure that you are using a unique Header/Label for each List in the IPv4 tab.
The new pending 2.1.1 version will have TLD feature which will allow for the blocking of the entire Domain/Sub-Domains...
See this thread:
pftdm007 last edited by
BBCan177 you're quick to reply!!! THanks!
Yes I have modified the headers/labels (thats the name I was searching for…) to be unique ones.
Is it just normal for me to find all my lists under a single Alias named "CustomBlockedLists"?? I really do not remember to have merged everything like that, unless I was drunk? :o
Looking forward to the TLD feature in pfblockerNG!! This will save us from entering multiple domains, and simplify things...