pfB_DNSBLIP_v4 where is it's list ?



  • I have an issue where a site is blocked thus

    2019-10-16 18_23_35-pfSense.localdomain - Firewall_ pfBlockerNG_ Alerts.jpg

    BUT for the life of me I can't find where the list is referenced. I can see the list in /var/db/pfblockerng/deny



  • It's defined in Firewall / pfBlockerNG / DNSBL section DNSBL IPs :

    When IPs are found in any Domain based Feed, configure IP Firewall Rules for these IPs

    You can use the Alerts Tab to suppress IPs, it will add the IPs to the IPv4 Suppression list.



  • I'm not sure what you mean by 'You can use the Alerts Tab to suppress IPs, it will add the IPs to the IPv4 Suppression list.'

    I thought the list was coming from the 'Feeds' obviously not



  • @randombits said in pfB_DNSBLIP_v4 where is it's list ?:

    I'm not sure what you mean by 'You can use the Alerts Tab to suppress IPs, it will add the IPs to the IPv4 Suppression list.'

    If you need to remove the IPs blocking.

    I thought the list was coming from the 'Feeds' obviously not

    Well it's coming from DNSBL Feeds instead of IPV4 Feeds.



  • OK thanks, I think I get it now. The ' IPv4 Suppression list' is a white list ? (clicking the '+' in the deny list)

    Just for clarity, I can see in /var/db/pfblockerng/deny the lists

    2019-10-16 19_38_24-deny - XCP-NG DQ77KB - WinSCP.jpg

    and under pfBlockerNG > IP > IPv4 I can see the corresponding lists created from 'feeds'

    2019-10-16 19_43_51-pfSense.localdomain - Firewall_ pfBlockerNG_ IP_ IPv4.jpg

    But I still don't get where the pfB_DNSBLIP_v4 (DNSBLIP_v4.txt) is created from 😕


Log in to reply