Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    pfBlockerNG wildcard blocking implementation is wack ?

    Scheduled Pinned Locked Moved pfBlockerNG
    4 Posts 2 Posters 1.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • E
      emikaadeo
      last edited by

      Just found this on the OISD blocklist maintainer website:

      "Note that pfBlockerNG does support wildcard blocking, but it's implementation is wack; It won't block subdomains to already listed subdomains, eg causing listed g.doubleclick.net to not block all of it's subdomains, which it should."

      More discussion here
      @BBcan177 what do you think about this ?

      NollipfSenseN 1 Reply Last reply Reply Quote 0
      • NollipfSenseN
        NollipfSense @emikaadeo
        last edited by NollipfSense

        @emikaadeo He already explain it here...see below. I can share that it works as intended for as long as I have used it...not a wack at all, that's just an opinion.

        Screenshot 2023-05-18 at 9.17.22 AM.png

        pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
        pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

        E 1 Reply Last reply Reply Quote 1
        • E
          emikaadeo @NollipfSense
          last edited by

          @nollipfsense said in pfBlockerNG wildcard blocking implementation is wack ?:

          @emikaadeo He already explain it here...see below. I can share that it works as intended for as long as I have used it...not a wack at all, that's just an opinion.

          Screenshot 2023-05-18 at 9.17.22 AM.png

          I think that's not the point.
          Everyone (including me) knows HOW wildcard blocking works in pfBlockerNG. The point is that the maintainers of the OISD and HaGeZi blocklists are wondering, WHY this funcionality is implemented in that way.
          And I'm just sharing this discussion found on reddit.

          NollipfSenseN 1 Reply Last reply Reply Quote 0
          • NollipfSenseN
            NollipfSense @emikaadeo
            last edited by

            @emikaadeo Had the impression you created the post on Reddit. Whenever there is a design implementation and one ask why, one should immediately ask oneself, why not. I see no issue(s) with how it's done. If I were those maintainers, I would directly ask BBcan177 instead of publicly claiming it's wack as well as share how they would do it differently...simple respect, isn't it?

            pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
            pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.