<![CDATA[https]]>Hi,

Sorry for my English.
I installed pfBockerNG-devel 3.0.0_16 and it blocks all porn sites It's good !
When the site is in http I see the pfBlockerNG page but when the site is in https I see an error page with code erreur : SSL_ERROR_INTERNAL_ERROR_ALERT.
Why ?

Thanks for your help

]]>https://forum.netgate.com/topic/164243/httpsRSS for NodeWed, 20 May 2026 08:15:44 GMTMon, 07 Jun 2021 11:30:12 GMT60<![CDATA[Reply to https on Mon, 07 Jun 2021 12:54:50 GMT]]>@ik2189 said in https:

So if i understand it's not possible to display a web page displaying that the site is not allowed ?

Thats correct. Gertjan has explained you the reason why thats so.

]]>https://forum.netgate.com/post/986596https://forum.netgate.com/post/986596Mon, 07 Jun 2021 12:54:50 GMT<![CDATA[Reply to https on Mon, 07 Jun 2021 12:47:19 GMT]]>@gertjan

So if i understand it's not possible to display a web page displaying that the site is not allowed ?

]]>https://forum.netgate.com/post/986592https://forum.netgate.com/post/986592Mon, 07 Jun 2021 12:47:19 GMT<![CDATA[Reply to https on Mon, 07 Jun 2021 12:33:41 GMT]]>@ik2189 said in https:

Why ?

The short answer : because no one** can break https = TLS.
If a web server want to connect to some 'p0rn-site-here.tld' and a web server, the one used by pfBlockerNG answers (because the DNS record matches a list) then the web browser tells you that that pfB web server, on your pfSense, does not have 'p0rn-site-here.tld' in it's certificate.
Which is understandable.
So, your web browser does not show the 'this site is blocked' page at all.

You might think : because 99,99 % of all traffic is https these days, is it useful to have this page 'this site is blocked' page being shown ?
Answer : of course not. It's something of the past. We see our browser telling us that 'there was an (cert !) issue'.

This is a TLS issue, not a pfBlockerNG issue ;)

** and the day some one breaks it, is the day that 'Internet' dies.

]]>https://forum.netgate.com/post/986585https://forum.netgate.com/post/986585Mon, 07 Jun 2021 12:33:41 GMT