Whitelist doesn't stay whitelisted

Apathia

With PFblockerNG activated, twitch.tv streams don't start. What I did to whitelist it, was go into the ipv4 section, Added a new list, kept pretty much everthing default except the names and List Action is set to permit both, then added twitch.tv to the IPv4 Custom list. I then saved it and updated PFblockerNG and twitch.tv streams work, until a while later when they stop working again.

Am I doing something wrong?

RonpfS

So what is blocked ?
The IP of twitch.tv or the Domain name "twitch.tv" ?

In the pfblockerNG Alerts tab you can see what is blocked :
IP are blocked under Deny - Last xxx Alert Entries
while Domains are blocked under DNSBL - Last xx Alert Entries

If there is a "+" icon, you can suppress it from the Alert tabs.
Remember to click on the InfoBlock icon on any pfBlockerNG page to get additional information about configuration/usage.

Apathia

Turns out it's the IP for the twitch video which uses a separate domain (video-edge-4995f0.iad02.hls.ttvnw.net is the whole url), and I've already added ttvnw.net to the whitelist, but it's still being blocked after a while.

Does this mean I have to whitelist the entire 192.16.64.0/21 IP range that's being blocked?

RonpfS

Maybe you could use the ASN AS46489 of Twitch TV to create a pass alias.

https://www.ultratools.com/tools/asnInfoResult?domainName=192.16.70.22

Apathia

That unfortunately didn't work, but just to make sure I'm doing it correctly, I use "AS46489" instead of "twitch.tv" in the IPv4 Custom list section?

Whitelisting the entire IP range does work though, but I don't think it's a good idea to keep it like that is it?

screencapture-10-10-10-1-pkg_edit-php-1483801839850.png

chrcoluk

what list blocked twitch?

Apathia

http://list.iblocklist.com/?list=dgxtneitpuvgqqcpfulq&fileformat=p2p&archiveformat=gz

Not sure which guide I used to add it. There was a script that added 3 levels plus 12 individual groups. This was in the Ads section.

Edit: https://forum.pfsense.org/index.php?topic=118424.0

RonpfS

Iblocklist are to be avoided, most are stale, looking at http://iplists.firehol.org/?ipset=iblocklist_ads it has not been updated since Sept 2015.

Under IPv4 Source Definitions :
Click here for Guidelines –->
You will see

Whois: Domain name or AS (ie: facebook.com or AS32934)

pfsensory

Any suggestions as to which lists would be better to use?