• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Custom aliases using domain name

Scheduled Pinned Locked Moved Off-Topic & Non-Support Discussion
32 Posts 5 Posters 4.1k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • K
    KOM @Su30MKI
    last edited by Nov 22, 2018, 2:52 PM

    This post is deleted!
    S 1 Reply Last reply Nov 22, 2018, 6:55 PM Reply Quote 0
    • S
      Su30MKI @KOM
      last edited by Nov 22, 2018, 6:55 PM

      @kom Thank you.. But I am not going to block it with the DNS IP address but with the DNS name.

      1 Reply Last reply Reply Quote 0
      • S
        Su30MKI
        last edited by Nov 22, 2018, 6:57 PM

        @nogbadthebad Thank you for the wonderful representation. I am so happy for your effort. Can I assign host based blocking in the network with this method?

        N 1 Reply Last reply Nov 22, 2018, 7:08 PM Reply Quote 0
        • S
          Su30MKI
          last edited by Nov 22, 2018, 7:03 PM

          @youngsand1 Hi.. Thank you for showing your support. I created an alias with the url. But it is not blocking.0_1542913389436_Facebook-Alias.PNG

          1 Reply Last reply Reply Quote 0
          • K
            KOM
            last edited by Nov 22, 2018, 7:06 PM

            This post is deleted!
            1 Reply Last reply Reply Quote 0
            • N
              NogBadTheBad @Su30MKI
              last edited by Nov 22, 2018, 7:08 PM

              @su30mki said in Custom aliases using domain name:

              @nogbadthebad Thank you for the wonderful representation. I am so happy for your effort. Can I assign host based blocking in the network with this method?

              Never used it but there's a bit at the bottom:-

              0_1542913706306_Screenshot 2018-11-22 at 19.07.04.png

              I still think you'd be better blocking by AS number.

              Andy

              1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

              S 1 Reply Last reply Nov 22, 2018, 7:19 PM Reply Quote 1
              • S
                Su30MKI
                last edited by Nov 22, 2018, 7:11 PM

                This post is deleted!
                1 Reply Last reply Reply Quote 0
                • S
                  Su30MKI @NogBadTheBad
                  last edited by Su30MKI Nov 22, 2018, 7:20 PM Nov 22, 2018, 7:19 PM

                  @nogbadthebad I understand that part. How to create an alias for blocking pfsense by pfblockerng? I am very new to pf blockerng. I also have paid blacklist service. Can I load that to pfblockerng?

                  1 Reply Last reply Reply Quote 0
                  • N
                    NogBadTheBad
                    last edited by NogBadTheBad Nov 22, 2018, 7:41 PM Nov 22, 2018, 7:29 PM

                    • Instal lpfBlockerNG-devel

                    • Run the setup wizard , define your inbound and outbound interface.

                    • Create a rule Firewall -> pfBlockerNG -> IP -> IPv4 as per my screenshot but set it as deny outbound

                    • Run update via Firewall -> pfBlockerNG -> Update, the firewall rules will automatically be created

                    The rules will automatically be created on the inbound and outbound interfaces, give it a go, its quite easy.

                    0_1542914881999_Screenshot 2018-11-22 at 19.25.49.png

                    Re the paid block list you can, depending on the format, it basically creates tables that are used in firewall rules, check the tables out via Diagnostics -> Tables

                    0_1542915086235_Screenshot 2018-11-22 at 19.31.13.png

                    Andy

                    1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

                    S 1 Reply Last reply Nov 28, 2018, 6:08 AM Reply Quote 1
                    • S
                      Su30MKI @NogBadTheBad
                      last edited by Nov 28, 2018, 6:08 AM

                      @nogbadthebad Hello.. Thank you for your support. I am sorry for the delay in the reply. I was doing a whole new set up. I have multi wan failover setup done. So in PfblockerNG, The Inbound interface --> WAN1 & WAN2 and The outbound interface --> LAN. Is it the right method?

                      N 1 Reply Last reply Nov 28, 2018, 8:47 AM Reply Quote 0
                      • N
                        NogBadTheBad @Su30MKI
                        last edited by Nov 28, 2018, 8:47 AM

                        @su30mki

                        Yup sounds right.

                        Andy

                        1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

                        S 1 Reply Last reply Nov 28, 2018, 8:56 AM Reply Quote 1
                        • S
                          Su30MKI @NogBadTheBad
                          last edited by Nov 28, 2018, 8:56 AM

                          @nogbadthebad I am having multiple vlans created in pfsense. Then I think the outbound interface should be all the vlans.

                          N 1 Reply Last reply Nov 28, 2018, 10:48 AM Reply Quote 0
                          • N
                            NogBadTheBad @Su30MKI
                            last edited by Nov 28, 2018, 10:48 AM

                            @su30mki

                            Yes.

                            Andy

                            1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

                            S 1 Reply Last reply Nov 28, 2018, 2:19 PM Reply Quote 1
                            • S
                              Su30MKI @NogBadTheBad
                              last edited by Su30MKI Nov 28, 2018, 2:19 PM Nov 28, 2018, 2:19 PM

                              @nogbadthebad Hi, I tried doing it, But it is not blocking facebook. Please find the screenshots.1_1543414765834_IPv4-list-2.PNG 0_1543414765815_IPv4-list1.PNG

                              1 Reply Last reply Reply Quote 0
                              • N
                                NogBadTheBad
                                last edited by NogBadTheBad Nov 28, 2018, 2:24 PM Nov 28, 2018, 2:21 PM

                                It's deny outbound.

                                Get it working with ASN numbers they play with the social networking source after.

                                Andy

                                1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

                                1 Reply Last reply Reply Quote 0
                                • N
                                  NogBadTheBad
                                  last edited by NogBadTheBad Nov 28, 2018, 2:51 PM Nov 28, 2018, 2:40 PM

                                  I've just tried it and its an issue with your block list as it doesn't contain valid IP addresses just 0.0.0.0 FQDN.

                                  PfB_Test_v4 Table
                                  IP Address
                                  123.41.54.45
                                  130.211.230.53
                                  160.41.54.45
                                  163.41.54.45
                                  194.41.54.45

                                  Rather than using IP try using the DBNS

                                  0_1543416681468_Screenshot 2018-11-28 at 14.50.13.png

                                  Andy

                                  1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

                                  1 Reply Last reply Reply Quote 1
                                  • S
                                    Su30MKI
                                    last edited by Nov 28, 2018, 3:00 PM

                                    Can you please suggest any list?

                                    N 1 Reply Last reply Nov 28, 2018, 3:06 PM Reply Quote 0
                                    • N
                                      NogBadTheBad @Su30MKI
                                      last edited by Nov 28, 2018, 3:06 PM

                                      @su30mki

                                      Have you tried blocking facebook by ASN numbers or like I suggested try the using the list your using in the DBNSL section as per my screenshot.

                                      Andy

                                      1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

                                      S 1 Reply Last reply Nov 28, 2018, 3:13 PM Reply Quote 0
                                      • S
                                        Su30MKI @NogBadTheBad
                                        last edited by Nov 28, 2018, 3:13 PM

                                        @nogbadthebad Thank you very much.. It is working. Saved my reputation.

                                        N 1 Reply Last reply Nov 28, 2018, 3:14 PM Reply Quote 0
                                        • N
                                          NogBadTheBad @Su30MKI
                                          last edited by Nov 28, 2018, 3:14 PM

                                          @su30mki said in Custom aliases using domain name:

                                          @nogbadthebad Thank you very much.. It is working. Saved my reputation.

                                          via IP and ASN number or DNSBL ?

                                          Andy

                                          1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

                                          S 1 Reply Last reply Nov 28, 2018, 3:21 PM Reply Quote 1
                                          25 out of 32
                                          • First post
                                            25/32
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                            This community forum collects and processes your personal information.
                                            consent.not_received