Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Unknown User defined feeds

    pfBlockerNG
    2
    3
    144
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      token last edited by

      Hello all, I noticed a legit website being blocked so I started to dig into my pfblocker setup- turned out to be the pfB_PRI1_v4 feed (pfblocker IP not dnsbl).

      Buuuuut, while in there I noticed in the logs some DNSBL activity from a feed “Cameleon”. I saw it blocking an API I actually didn’t want blocked/dropped/blackholed. So I wend to feeds to disable it and I can’t. Its at the bottom of feeds found with a number of other feeds in an “Unknown user defined Feeds” panel- there are no controls to disable or delete them. Maybe a reelect from an older pfblocker install?
      c6f90c03-ebdd-43bd-b224-f1b20ed686c8-image.png

      How can I go about purging these lists out? I imagine somewhere in an SSH session there is a path I can nuke?

      I think I might have found the path, some of the files here are in this unknown user defined feeds, but not all of them. I don’t want to rm -rf without knowing more.
      1773f85d-889d-453c-89cf-f3b655696bca-image.png

      RonpfS 1 Reply Last reply Reply Quote 0
      • RonpfS
        RonpfS @token last edited by

        @token Those URLs were removed from the Feeds tab because they are offline, discontinued, etc.

        Click on the Alias/Group name and it will open the appropriate Alias/Group tab. Delete the URL, Save Settings, when done, run a Force Update, that should remove the feed from the db/pfblockerng folder. Inspect the logs, to find more problems.

        T 1 Reply Last reply Reply Quote 1
        • T
          token @RonpfS last edited by

          @ronpfs said in Unknown User defined feeds:

          @token Those URLs were removed from the Feeds tab because they are offline, discontinued, etc.

          Click on the Alias/Group name and it will open the appropriate Alias/Group tab. Delete the URL, Save Settings, when done, run a Force Update, that should remove the feed from the db/pfblockerng folder. Inspect the logs, to find more problems.

          Thank you!

          1 Reply Last reply Reply Quote 0
          • First post
            Last post

          Products

          • Platform Overview
          • TNSR
          • pfSense
          • Appliances

          Services

          • Training
          • Professional Services

          Support

          • Subscription Plans
          • Contact Support
          • Product Lifecycle
          • Documentation

          News

          • Media Coverage
          • Press
          • Events

          Resources

          • Blog
          • FAQ
          • Find a Partner
          • Resource Library
          • Security Information

          Company

          • About Us
          • Careers
          • Partners
          • Contact Us
          • Legal
          Our Mission

          We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

          Subscribe to our Newsletter

          Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

          © 2021 Rubicon Communications, LLC | Privacy Policy