• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

pfBlockerNG wildcard blocking implementation is wack ?

Scheduled Pinned Locked Moved pfBlockerNG
4 Posts 2 Posters 1.1k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • E
    emikaadeo
    last edited by May 10, 2023, 8:08 PM

    Just found this on the OISD blocklist maintainer website:

    "Note that pfBlockerNG does support wildcard blocking, but it's implementation is wack; It won't block subdomains to already listed subdomains, eg causing listed g.doubleclick.net to not block all of it's subdomains, which it should."

    More discussion here
    @BBcan177 what do you think about this ?

    N 1 Reply Last reply May 18, 2023, 2:19 PM Reply Quote 0
    • N
      NollipfSense @emikaadeo
      last edited by NollipfSense May 18, 2023, 2:26 PM May 18, 2023, 2:19 PM

      @emikaadeo He already explain it here...see below. I can share that it works as intended for as long as I have used it...not a wack at all, that's just an opinion.

      Screenshot 2023-05-18 at 9.17.22 AM.png

      pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
      pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

      E 1 Reply Last reply May 18, 2023, 3:18 PM Reply Quote 1
      • E
        emikaadeo @NollipfSense
        last edited by May 18, 2023, 3:18 PM

        @nollipfsense said in pfBlockerNG wildcard blocking implementation is wack ?:

        @emikaadeo He already explain it here...see below. I can share that it works as intended for as long as I have used it...not a wack at all, that's just an opinion.

        Screenshot 2023-05-18 at 9.17.22 AM.png

        I think that's not the point.
        Everyone (including me) knows HOW wildcard blocking works in pfBlockerNG. The point is that the maintainers of the OISD and HaGeZi blocklists are wondering, WHY this funcionality is implemented in that way.
        And I'm just sharing this discussion found on reddit.

        N 1 Reply Last reply May 18, 2023, 8:58 PM Reply Quote 0
        • N
          NollipfSense @emikaadeo
          last edited by May 18, 2023, 8:58 PM

          @emikaadeo Had the impression you created the post on Reddit. Whenever there is a design implementation and one ask why, one should immediately ask oneself, why not. I see no issue(s) with how it's done. If I were those maintainers, I would directly ask BBcan177 instead of publicly claiming it's wack as well as share how they would do it differently...simple respect, isn't it?

          pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
          pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
            [[user:consent.lead]]
            [[user:consent.not_received]]