Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    pfsense ipset

    Firewalling
    4
    3
    103
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • Z
      zorrox last edited by

      Does pfsense have ipset(dnsmasq) feature or an equivalent?

      I am trying to whitelist a domain name on pfsense similar to using ipset to whitelist a domain using iptables. I want to allow domain like whatsapp and telegeram only for certain users.

      viktor_g 1 Reply Last reply Reply Quote 0
      • viktor_g
        viktor_g Netgate @zorrox last edited by

        @zorrox see https://docs.netgate.com/pfsense/en/latest/firewall/aliases.html#using-hostnames-in-aliases

        johnpoz 1 Reply Last reply Reply Quote 1
        • johnpoz
          johnpoz LAYER 8 Global Moderator @viktor_g last edited by

          While I was going to suggest that - its not really the same thing as ipset. But ipset ties in with iptables, and pfsense doesn't use iptables - even if has dnsmasq..

          But yeah its the closest thing.. But what is kind of kewl with ipset, is you can set netflix.com - and then anything.netflix.com would be in the rule. I don't believe, off the top of my head there is anyway to do that with aliases.. You have to be able to resolve the fqdn, or use a list of ip/netblocks..

          1 Reply Last reply Reply Quote 1
          • First post
            Last post

          Products

          • Platform Overview
          • TNSR
          • pfSense Plus
          • Appliances

          Services

          • Training
          • Professional Services

          Support

          • Subscription Plans
          • Contact Support
          • Product Lifecycle
          • Documentation

          News

          • Media Coverage
          • Press
          • Events

          Resources

          • Blog
          • FAQ
          • Find a Partner
          • Resource Library
          • Security Information

          Company

          • About Us
          • Careers
          • Partners
          • Contact Us
          • Legal
          Our Mission

          We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

          Subscribe to our Newsletter

          Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

          © 2021 Rubicon Communications, LLC | Privacy Policy