Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Vlans being blocked

    Scheduled Pinned Locked Moved pfBlockerNG
    3 Posts 2 Posters 876 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      cmpufxr
      last edited by

      Awesome package!! I have been using it for awhile now and I almost know how to use it.

      I have some lists that I need to block on the lan(no vlan), dom (vlan) web(vlan) but I do not want to block gam(vlan) and vpn(vlan).

      the lan is on its own 10gbe nic while the vlan all reside on another 10gbe nic. I do not have any more pci slots to add more nics.

      The issue is that when I enable pfblockerng and dnsbl on the dom and web vlan, it also blocks the gam and vpn vlans even though I have not selected them. I have temporary changed the dns for the gam and vpn vlans to a dns server different than the what the dns resolver uses to prevent this.

      I was under the understanding that the option of selecting the "DNSBL Firewall Rule" would allow blocking on some subnets but not others.

      also, I have had this setup for awhile on 1gbe nic without any issues, it is only when I upgraded to 10gbe and rebuilt the firewall that I have had this issue. before everything worked fine.

      1 Reply Last reply Reply Quote 0
      • BBcan177B
        BBcan177 Moderator
        last edited by

        The only way to bypass DNSBL is to define a different DNS server for those specific lan segments.

        The DNSBL permit rule is used to allow those other lan segments to talk to the DNSBL webserver. Otherwise, those other lan segments could timeout waiting for the DNSBL webserver to reply.

        "Experience is something you don't get until just after you need it."

        Website: http://pfBlockerNG.com
        Twitter: @BBcan177  #pfBlockerNG
        Reddit: https://www.reddit.com/r/pfBlockerNG/new/

        1 Reply Last reply Reply Quote 0
        • C
          cmpufxr
          last edited by

          OK, I got it… thanks for clarifying that for me.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.