pfblockerNG blocking some web on bypass IPs

scorpoin

Hello,

I've added some IPs in DNS resolver config file to bypass for pfblockerNG .

server:
    access-control-view: 192.168.10.2/32  bypass
    access-control-view: 192.168.10.203/32 bypass
    access-control-view: 192.168.10.0/24 dnsbl
    
view:
    name: "bypass"
    view-first: yes
view:
    name: "dnsbl"
    view-first: yes
include: /var/unbound/pfb_dnsbl.*conf

site are such are account.live.com , mega.nz . List containing the entire subnet DNSBLIPv4 . Question is bypass ips should not be effected via pfblockerng list.

Any idea what could be the issue of this abnormal behaviour.

Regards

Gertjan

Any idea what could be the issue of this abnormal behaviour.

pfBlcokerNG enters

and then some one broke(the format) it ;)

Start here : https://forum.netgate.com/topic/129365/bypassing-dnsbl-for-specific-ips/60

scorpoin

I've done following changes

server:
    access-control-view: 192.168.10.2/32  bypass
    access-control-view: 192.168.10.203/32 bypass
    access-control-view: 192.168.10.0/24 dnsbl
   include: /var/unbound/pfb_dnsbl.*conf
    
view:
    name: "bypass"
    view-first: yes
view:
    name: "dnsbl"
    view-first: yes

Now testing it again . Hope this config will work out.

Regards

scorpoin

@scorpoin said in pfblockerNG blocking some web on bypass IPs:

I've done following changes

server:
    access-control-view: 192.168.10.2/32  bypass
    access-control-view: 192.168.10.203/32 bypass
    access-control-view: 192.168.10.0/24 dnsbl
   include: /var/unbound/pfb_dnsbl.*conf
    
view:
    name: "bypass"
    view-first: yes
view:
    name: "dnsbl"
    view-first: yes

Now testing it again . Hope this config will work out.

Regards

above configuration did not help , it does not bypass those IPs which I've added not to be blocked. Strange thing is below configuration is working fine.

server:
    access-control-view: 192.168.10.2/32  bypass
    access-control-view: 192.168.10.203/32 bypass
    access-control-view: 192.168.10.0/24 dnsbl
 
    
view:
    name: "bypass"
    view-first: yes
view:
    name: "dnsbl"
    view-first: yes
  include: /var/unbound/pfb_dnsbl.*conf

If that is wrong format then how the hell it is working ?

Regards

Gertjan

@scorpoin :

With checking the 'manual', a certain pattern can be observed :

First, in the server part, 'groups' or 'classes' are defined : called 'bypass' and 'dnsbl'. They have a 'network(s).
Then for each group or view (network), option are listed.
One of them - called 'dnsbl' includes our pfb_dnsbl file.

Note : I guess we can have the "views" called 'limited' or 'restricted' or whatever.