Best Way to Add numerous IP's to aliases

daschenbrener

I am trying to created some aliases for Microsoft, Facebook, etc, so that we can allow them through the firewall.

What would be the best practice to be able to import these into pfsense or if any some type of tool.

Or if there is something already in place that is created already.

Thanks in advance

David

KOM

Create an URL Table alias. It's basically just a reference to a text file that holds all the addresses you want.

daschenbrener

thanks for the info

Now a quick question i found Microsoft publishes their office 365 list via xml

https://support.content.office.net/en-us/static/O365IPAddresses.xml

is there a way to utilize this list from them?

daschenbrener

I added it to PFblockerNG and made the rules to permit both, would that be the correct way to utilize it?

KOM

URL Table aliases expect just text, one entry per line. The MS list is XML, so they are not directly compatible.

I don't use pfBlockerNG so I can't answer your questions. Try the pfBlockerNG forum.

daschenbrener

It is working though, as an FYI. it parsed the file

KOM

Thanks for the tip. I just checked the pfSense book and it doesn't go into much detail at all about URL aliases and URL tables aliases.

I did misspeak earlier. You should be using an URL alias, not URL Table. URL Table is for when the list needs to be updated on a schedule.