• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

REGEX blocking

Scheduled Pinned Locked Moved pfBlockerNG
48 Posts 8 Posters 9.1k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • F
    Forumis
    last edited by Forumis Feb 1, 2023, 2:44 PM Feb 1, 2023, 2:43 PM

    This post is deleted!
    1 Reply Last reply Reply Quote 0
    • A
      Antibiotic @Uglybrian
      last edited by May 13, 2024, 7:50 PM

      @Uglybrian Is it still working?

      pfSense plus 24.11 on Topton mini PC
      CPU: Intel N100
      NIC: Intel i-226v 4 pcs
      RAM : 16 GB DDR5
      Disk: 128 GB NVMe
      Brgds, Archi

      1 Reply Last reply Reply Quote 0
      • A
        Antibiotic @Gertjan
        last edited by May 13, 2024, 8:07 PM

        @Gertjan Hello, are you still using regex blocking in pfblockerng?

        pfSense plus 24.11 on Topton mini PC
        CPU: Intel N100
        NIC: Intel i-226v 4 pcs
        RAM : 16 GB DDR5
        Disk: 128 GB NVMe
        Brgds, Archi

        G 1 Reply Last reply May 14, 2024, 6:03 AM Reply Quote 0
        • U
          Uglybrian
          last edited by May 13, 2024, 9:29 PM

          Yes Antibotic, its still working and I am still using the same list. so far so good.

          1 Reply Last reply Reply Quote 0
          • G
            Gertjan @Antibiotic
            last edited by May 14, 2024, 6:03 AM

            @Antibiotic

            yes :

            0795fca1-4275-4cd0-b6b8-7e0cb66bdf99-image.png

            It's pretty powerful.
            Be aware : regex !

            Read it like this : if any of the text in the lines (the requested host name) matches the regex list, the request gets blocked.

            No "help me" PM's please. Use the forum, the community will thank you.
            Edit : and where are the logs ??

            A 1 Reply Last reply May 14, 2024, 10:13 AM Reply Quote 0
            • A
              Antibiotic @Gertjan
              last edited by May 14, 2024, 10:13 AM

              @Gertjan Can you please post your regex in text format? I will copy

              pfSense plus 24.11 on Topton mini PC
              CPU: Intel N100
              NIC: Intel i-226v 4 pcs
              RAM : 16 GB DDR5
              Disk: 128 GB NVMe
              Brgds, Archi

              G 1 Reply Last reply May 14, 2024, 10:19 AM Reply Quote 0
              • G
                Gertjan @Antibiotic
                last edited by May 14, 2024, 10:19 AM

                @Antibiotic

                ^(.+[_.-])?adse?rv(er?|ice)?s?[0-9]*[_.-] #test RGX1
                ^(.+[_.-])?telemetry[_.-] #test RGX2
                ^adim(age|g)s?[0-9]*[_.-] #test RGX4
                ^adtrack(er|ing)?[0-9]*[_.-] #test RGX5
                ^advert(s|is(ing|ements?))?[0-9]*[_.-] #test RGX6
                ^aff(iliat(es?|ion))?[_.-] #test RGX7
                ^analytics?[_.-] #test RGX8
                ^banners?[_.-] #test RGX9
                ^beacons?[0-9]*[_.-] #test RGX10
                ^count(ers?)?[0-9]*[_.-] #test RGX11
                ^pixels?[-.] #test RGX12
                ^stat(s|istics)?[0-9]*[_.-] #test RGX13
                ^stat(s|istics)?[0-9]*[_.-] #test RGX14
                

                No "help me" PM's please. Use the forum, the community will thank you.
                Edit : and where are the logs ??

                A L 3 Replies Last reply May 14, 2024, 10:20 AM Reply Quote 0
                • A
                  Antibiotic @Gertjan
                  last edited by May 14, 2024, 10:20 AM

                  @Gertjan Thank you

                  pfSense plus 24.11 on Topton mini PC
                  CPU: Intel N100
                  NIC: Intel i-226v 4 pcs
                  RAM : 16 GB DDR5
                  Disk: 128 GB NVMe
                  Brgds, Archi

                  G 1 Reply Last reply May 14, 2024, 10:30 AM Reply Quote 0
                  • G
                    Gertjan @Antibiotic
                    last edited by May 14, 2024, 10:30 AM

                    @Antibiotic

                    Keep an eye on it :

                    57cb2bd3-ae9e-4a48-809b-42b97b12c284-image.png

                    33306f66-7def-442a-a910-cbe6ffcf37da-image.png

                    No "help me" PM's please. Use the forum, the community will thank you.
                    Edit : and where are the logs ??

                    A 1 Reply Last reply May 14, 2024, 10:33 AM Reply Quote 0
                    • A
                      Antibiotic @Gertjan
                      last edited by May 14, 2024, 10:33 AM

                      @Gertjan Are you block for incoming?
                      What the reason, firewall block itself all in?

                      pfSense plus 24.11 on Topton mini PC
                      CPU: Intel N100
                      NIC: Intel i-226v 4 pcs
                      RAM : 16 GB DDR5
                      Disk: 128 GB NVMe
                      Brgds, Archi

                      G 1 Reply Last reply May 14, 2024, 11:25 AM Reply Quote 0
                      • G
                        Gertjan @Antibiotic
                        last edited by May 14, 2024, 11:25 AM

                        @Antibiotic said in REGEX blocking:

                        Are you block for incoming?

                        My LANs of course.

                        5ab0902a-71b5-4617-a070-07545a8825e7-image.png

                        That's where the original DNS requests come from, and I want to 'disable' some of them like "incoming.telemetry.mozilla.org" (probably from my browser).
                        I don't know what beacons.gtv2.com is, the request came from my captive portal.

                        @Antibiotic said in REGEX blocking:

                        What the reason, firewall block itself all in?

                        The regex has nothing to with the/a firewall.
                        A DNS request came in "what is the A of incoming.telemetry.mozilla.org ?"
                        The regex filter found it, so pfBlockerng told unbound to tell the LAN client : it's 0.0.0.0.
                        When the LAN clients receives 0.0.0.0 it can't connect to "incoming.telemetry.mozilla.org" because it has no valid IP to connect to.
                        This is how DNSBL works.

                        I don't need (want) a firewall that blocks "Internet" IPs. My LAN firewall is wide open - the portal a bit less, though.

                        No "help me" PM's please. Use the forum, the community will thank you.
                        Edit : and where are the logs ??

                        A 1 Reply Last reply May 14, 2024, 11:40 AM Reply Quote 0
                        • A
                          Antibiotic @Gertjan
                          last edited by May 14, 2024, 11:40 AM

                          @Gertjan are you using firefox?

                          pfSense plus 24.11 on Topton mini PC
                          CPU: Intel N100
                          NIC: Intel i-226v 4 pcs
                          RAM : 16 GB DDR5
                          Disk: 128 GB NVMe
                          Brgds, Archi

                          G 1 Reply Last reply May 14, 2024, 12:36 PM Reply Quote 0
                          • G
                            Gertjan @Antibiotic
                            last edited by May 14, 2024, 12:36 PM

                            @Antibiotic

                            The better part of my live, and for the moment, yeah....

                            No "help me" PM's please. Use the forum, the community will thank you.
                            Edit : and where are the logs ??

                            A 1 Reply Last reply May 14, 2024, 2:22 PM Reply Quote 0
                            • A
                              Antibiotic @Gertjan
                              last edited by Antibiotic May 14, 2024, 2:31 PM May 14, 2024, 2:22 PM

                              @Gertjan Idk, which platform you are using for firefox, linux or freebsd, but under windows firefox is disaster

                              pfSense plus 24.11 on Topton mini PC
                              CPU: Intel N100
                              NIC: Intel i-226v 4 pcs
                              RAM : 16 GB DDR5
                              Disk: 128 GB NVMe
                              Brgds, Archi

                              G 1 Reply Last reply May 14, 2024, 4:44 PM Reply Quote 0
                              • G
                                Gertjan @Antibiotic
                                last edited by May 14, 2024, 4:44 PM

                                @Antibiotic said in REGEX blocking:

                                but under windows firefox is disaster

                                Works fine for me, I only have Microsoft GUIs here.
                                Other OSs here have no GUI, only command line acces, and lynx if needed.

                                No "help me" PM's please. Use the forum, the community will thank you.
                                Edit : and where are the logs ??

                                A 1 Reply Last reply May 14, 2024, 4:49 PM Reply Quote 0
                                • A
                                  Antibiotic @Gertjan
                                  last edited by Antibiotic May 14, 2024, 4:56 PM May 14, 2024, 4:49 PM

                                  @Gertjan Oki))I tried a few times , but on my laptop firefox tabs are a huge, actually all a huge . Do not like it at all and native edge better integrate to windows security options.

                                  pfSense plus 24.11 on Topton mini PC
                                  CPU: Intel N100
                                  NIC: Intel i-226v 4 pcs
                                  RAM : 16 GB DDR5
                                  Disk: 128 GB NVMe
                                  Brgds, Archi

                                  G 1 Reply Last reply May 14, 2024, 4:56 PM Reply Quote 0
                                  • G
                                    Gertjan @Antibiotic
                                    last edited by May 14, 2024, 4:56 PM

                                    @Antibiotic
                                    I have huge screens ^^

                                    No "help me" PM's please. Use the forum, the community will thank you.
                                    Edit : and where are the logs ??

                                    A 1 Reply Last reply May 14, 2024, 5:01 PM Reply Quote 0
                                    • A
                                      Antibiotic @Gertjan
                                      last edited by May 14, 2024, 5:01 PM

                                      @Gertjan What kind of dimension?

                                      pfSense plus 24.11 on Topton mini PC
                                      CPU: Intel N100
                                      NIC: Intel i-226v 4 pcs
                                      RAM : 16 GB DDR5
                                      Disk: 128 GB NVMe
                                      Brgds, Archi

                                      G 1 Reply Last reply May 14, 2024, 5:02 PM Reply Quote 0
                                      • G
                                        Gertjan @Antibiotic
                                        last edited by May 14, 2024, 5:02 PM

                                        @Antibiotic 72 cm diagonal

                                        No "help me" PM's please. Use the forum, the community will thank you.
                                        Edit : and where are the logs ??

                                        A 1 Reply Last reply May 14, 2024, 5:04 PM Reply Quote 0
                                        • A
                                          Antibiotic @Gertjan
                                          last edited by May 14, 2024, 5:04 PM

                                          @Gertjan Is it not a PC screen right? It is TV screen

                                          pfSense plus 24.11 on Topton mini PC
                                          CPU: Intel N100
                                          NIC: Intel i-226v 4 pcs
                                          RAM : 16 GB DDR5
                                          Disk: 128 GB NVMe
                                          Brgds, Archi

                                          1 Reply Last reply Reply Quote 0
                                          • First post
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                            [[user:consent.lead]]
                                            [[user:consent.not_received]]