<![CDATA[Looks lke its " working ...]]>Been setting up Pfblocker
when i do nslookup on client i get 10.10.10.1 (ip of pfsense)
But i does 'nt picks up anything

Schermafbeelding 2019-11-04 om 05.46.23.png

Also have the 2 FW Rukel Allow and block DNS as it should work

Schermafbeelding 2019-11-04 om 06.51.16.png

What else can I Check ???

]]>https://forum.netgate.com/topic/147855/looks-lke-its-workingRSS for NodeWed, 12 Aug 2026 15:28:13 GMTMon, 04 Nov 2019 05:51:54 GMT60<![CDATA[Reply to Looks lke its " working ... on Sun, 10 Nov 2019 01:17:20 GMT]]>@Gertjan said in Looks lke its " working ...:

The webserver being used by pfBlockerNG is listening to :

If i leave it @ 127.0.0.1, my when i try to acces a blocked domain the browser keeps spining.
ANd nothing getting logged in DNSBL

sockstat -4l | grep 'lighttpd_p'
root lighttpd_p 85774 4 tcp4 *:8081 :
root lighttpd_p 85774 5 tcp4 *:8443 :
root lighttpd_p 85774 6 tcp4 10.10.10.1:443 :

]]>https://forum.netgate.com/post/875008https://forum.netgate.com/post/875008Sun, 10 Nov 2019 01:17:20 GMT<![CDATA[Reply to Looks lke its " working ... on Sat, 09 Nov 2019 15:53:18 GMT]]>The webserver being used by pfBlockerNG is listening to :

[2.4.4-RELEASE][admin@pfsense.brit-hotel-fumel.net]/root: sockstat -4l | grep 'lighttpd_p'
root     lighttpd_p 33889 4  tcp4   *:8081                *:*
root     lighttpd_p 33889 5  tcp4   *:8443                *:*
root     lighttpd_p 33889 6  tcp4   10.10.10.1:443        *:*

all interfaces, which includes "localhost" or 127.0.0.1

This is probably not stated for nothing :

4c42906b-18c0-4401-a896-01432068c3aa-image.png

]]>https://forum.netgate.com/post/874988https://forum.netgate.com/post/874988Sat, 09 Nov 2019 15:53:18 GMT<![CDATA[Reply to Looks lke its " working ... on Sat, 09 Nov 2019 03:35:55 GMT]]>@Gertjan
Great, it works now

Schermafbeelding 2019-11-09 om 04.33.15.png

IPblock and DNSBL.

Had to change the NAT rulez
instead of 127.0.0.1 to 10.10.10.1

Schermafbeelding 2019-11-09 om 04.35.34.png

]]>https://forum.netgate.com/post/874964https://forum.netgate.com/post/874964Sat, 09 Nov 2019 03:35:55 GMT<![CDATA[Reply to Looks lke its " working ... on Thu, 07 Nov 2019 21:39:09 GMT]]>Be happy about it.
it means you're not looking at web pages that (try to) include links to sits that are blocked.
It's as simple as that.

Simply said : when you're looking for pub/scam/blacklisted-pages there is no need to block them.
Because you're not visiting them.
So, there is nothing to block ^^

]]>https://forum.netgate.com/post/874695https://forum.netgate.com/post/874695Thu, 07 Nov 2019 21:39:09 GMT<![CDATA[Reply to Looks lke its " working ... on Thu, 07 Nov 2019 17:33:36 GMT]]>@Gertjan Schermafbeelding 2019-11-07 om 18.32.43.png

Only pfb_TOP get logged ??

]]>https://forum.netgate.com/post/874651https://forum.netgate.com/post/874651Thu, 07 Nov 2019 17:33:36 GMT<![CDATA[Reply to Looks lke its " working ... on Thu, 07 Nov 2019 09:27:03 GMT]]>Looks all fine to me.

]]>https://forum.netgate.com/post/874515https://forum.netgate.com/post/874515Thu, 07 Nov 2019 09:27:03 GMT<![CDATA[Reply to Looks lke its " working ... on Thu, 07 Nov 2019 03:30:37 GMT]]>@Gertjan
LAN INFO

Schermafbeelding 2019-11-07 om 04.29.58.png Schermafbeelding 2019-11-07 om 04.29.48.png

DNSBL INFO
Schermafbeelding 2019-11-07 om 04.30.12.png

]]>https://forum.netgate.com/post/874493https://forum.netgate.com/post/874493Thu, 07 Nov 2019 03:30:37 GMT<![CDATA[Reply to Looks lke its " working ... on Wed, 06 Nov 2019 16:09:22 GMT]]>What is your "DNSBL Webserver Configuration Virtual IP Address " now ?
What is your pfSense LAN IP now ?

]]>https://forum.netgate.com/post/874411https://forum.netgate.com/post/874411Wed, 06 Nov 2019 16:09:22 GMT<![CDATA[Reply to Looks lke its " working ... on Wed, 06 Nov 2019 15:25:09 GMT]]>@VenimK
did a complete new install pfsense, and then pfblocker-dev.
And it still works as before, no loggin with DNSBL.
Allthough nslookup looks ok, and stuff
nslookup www.yahoo.com
Server: 10.10.10.1
Address: 10.10.10.1#53

Name: www.yahoo.com
Address: 10.10.10.1

]]>https://forum.netgate.com/post/874399https://forum.netgate.com/post/874399Wed, 06 Nov 2019 15:25:09 GMT<![CDATA[Reply to Looks lke its " working ... on Tue, 05 Nov 2019 18:05:32 GMT]]>@Gertjan
NOw when i do nslookup from a client if get
nslookup www.upcoin.com
Server: 10.10.10.1 (PFSENSE LAN IP
Address: 10.10.10.1#53

Name: www.upcoin.com
Address: 172.16.0.1 (DNSBL IP)

So it kinda works
But i get still no logs

Schermafbeelding 2019-11-05 om 19.05.14.png

]]>https://forum.netgate.com/post/874217https://forum.netgate.com/post/874217Tue, 05 Nov 2019 18:05:32 GMT<![CDATA[Reply to Looks lke its " working ... on Tue, 05 Nov 2019 12:05:39 GMT]]>Don't think so.
A Force reload does it for me.

]]>https://forum.netgate.com/post/874158https://forum.netgate.com/post/874158Tue, 05 Nov 2019 12:05:39 GMT<![CDATA[Reply to Looks lke its " working ... on Mon, 04 Nov 2019 17:38:40 GMT]]>@Gertjan said in Looks lke its " working ...:

ff5bad85-f268-44a7-9907-eb5c27b2cd6e-image.png

and you did that also ?

Maybe a reinstall off the plugin

]]>https://forum.netgate.com/post/874057https://forum.netgate.com/post/874057Mon, 04 Nov 2019 17:38:40 GMT<![CDATA[Reply to Looks lke its " working ... on Mon, 04 Nov 2019 14:16:29 GMT]]>@Gertjan
Yes
And rebooted to

]]>https://forum.netgate.com/post/874031https://forum.netgate.com/post/874031Mon, 04 Nov 2019 14:16:29 GMT<![CDATA[Reply to Looks lke its " working ... on Mon, 04 Nov 2019 08:13:40 GMT]]>ff5bad85-f268-44a7-9907-eb5c27b2cd6e-image.png

and you did that also ?

]]>https://forum.netgate.com/post/873993https://forum.netgate.com/post/873993Mon, 04 Nov 2019 08:13:40 GMT<![CDATA[Reply to Looks lke its " working ... on Mon, 04 Nov 2019 08:12:40 GMT]]>@Gertjan said in Looks lke its " working ...:

That's your ""DNSBL Webserver Configuration / Virtual IP Address".

Schermafbeelding 2019-11-04 om 09.12.16.png

]]>https://forum.netgate.com/post/873992https://forum.netgate.com/post/873992Mon, 04 Nov 2019 08:12:40 GMT<![CDATA[Reply to Looks lke its " working ... on Mon, 04 Nov 2019 08:07:32 GMT]]>@VenimK said in Looks lke its " working ...:

Weird , going to 192.168.1.1

That's your ""DNSBL Webserver Configuration / Virtual IP Address".

]]>https://forum.netgate.com/post/873991https://forum.netgate.com/post/873991Mon, 04 Nov 2019 08:07:32 GMT<![CDATA[Reply to Looks lke its " working ... on Mon, 04 Nov 2019 08:03:23 GMT]]>@Gertjan said in Looks lke its " working ...:

pfB_DNSBLIP_v4

Schermafbeelding 2019-11-04 om 09.02.37.png

Weird , going to 192.168.1.1

]]>https://forum.netgate.com/post/873990https://forum.netgate.com/post/873990Mon, 04 Nov 2019 08:03:23 GMT<![CDATA[Reply to Looks lke its " working ... on Mon, 04 Nov 2019 07:44:11 GMT]]>Take an URL from a feed the first alias "pfB_DNSBLIP_v4".
Feed that into a local "nslookup" prompt.
Have it resolved.
Did it return the real IPv4 - or the one from pfBlockerNG ? (like 0.0.0.1 or your local "DNSBL Webserver Configuration / Virtual IP Address ?

]]>https://forum.netgate.com/post/873988https://forum.netgate.com/post/873988Mon, 04 Nov 2019 07:44:11 GMT<![CDATA[Reply to Looks lke its " working ... on Mon, 04 Nov 2019 07:33:32 GMT]]>@Gertjan

Schermafbeelding 2019-11-04 om 08.31.58.png

Changed DNSBL VIP to 172.16.0.1
GEOIP is working but none of the other

]]>https://forum.netgate.com/post/873987https://forum.netgate.com/post/873987Mon, 04 Nov 2019 07:33:32 GMT<![CDATA[Reply to Looks lke its " working ... on Mon, 04 Nov 2019 07:04:25 GMT]]>So, the default 192.168.1.0/24 should be fine for LAN setting - the default DHCP pool also.

@VenimK said in Looks lke its " working ...:

So Should i change PFBLOCKER IP to 10.10.10.1 again, then, reboot server ..

Noop.
You'll be breaking a condition :

0ed78883-61db-4111-a830-1ca68848f77d-image.png

Check also the last condition :
192.168.0.0/16 (your 192.168.1.1) is in the range of this setting, and your WAN is in that range.
Go for a 172.16.0.1 as a DNSBL Virtual IP setting.

]]>https://forum.netgate.com/post/873986https://forum.netgate.com/post/873986Mon, 04 Nov 2019 07:04:25 GMT<![CDATA[Reply to Looks lke its " working ... on Mon, 04 Nov 2019 07:00:22 GMT]]>Schermafbeelding 2019-11-04 om 07.59.10.png

DHCP WAN

So Should i change PFBLOCKER IP to 10.10.10.1 again, then, reboot server ..

]]>https://forum.netgate.com/post/873985https://forum.netgate.com/post/873985Mon, 04 Nov 2019 07:00:22 GMT<![CDATA[Reply to Looks lke its " working ... on Mon, 04 Nov 2019 06:57:12 GMT]]>@VenimK said in Looks lke its " working ...:

Ran into problems because off my lan dhcp

What problems ?
192.168.1.0/24 was also used for WAN ?

]]>https://forum.netgate.com/post/873984https://forum.netgate.com/post/873984Mon, 04 Nov 2019 06:57:12 GMT<![CDATA[Reply to Looks lke its " working ... on Mon, 04 Nov 2019 06:53:05 GMT]]>@Gertjan

Schermafbeelding 2019-11-04 om 07.50.39.png

i've changed that to 192.168.1.1
Ran into problems because off my lan dhcp

Schermafbeelding 2019-11-04 om 07.51.37.png

]]>https://forum.netgate.com/post/873983https://forum.netgate.com/post/873983Mon, 04 Nov 2019 06:53:05 GMT<![CDATA[Reply to Looks lke its " working ... on Mon, 04 Nov 2019 06:49:33 GMT]]>Hi,

Read https://en.wikipedia.org/wiki/Domain_Name_System and discover that DNS requests can use TCP packets.

edit :

@VenimK said in Looks lke its " working ...:

when i do nslookup on client i get 10.10.10.1 (ip of pfsense)

What did you set up here Firewall > pfBlocker > NGDNSBL :
d1247039-ce85-4de8-8ce3-04ee479673dd-image.png

?

]]>https://forum.netgate.com/post/873981https://forum.netgate.com/post/873981Mon, 04 Nov 2019 06:49:33 GMT