<![CDATA[Suggestions on home pfsense appliance that will handle porn blocking]]>Hello!

New pfsense user here. Have the Netgate 1100. My question is this.
Is this not have enough RAM to run porn TLD lists? I see that only have 1 GB of RAM is not sufficient.

Thanks for any suggestions. I am more than willing to step up to a 2100 or 4100. I also like to do some home labbing/tests/ as well and will probably set myself up with
a remote access VPN to access home network from remote locations as needed.
Thanks!
Dan

]]>https://forum.netgate.com/topic/183102/suggestions-on-home-pfsense-appliance-that-will-handle-porn-blockingRSS for NodeSat, 13 Jun 2026 09:26:44 GMTThu, 28 Sep 2023 11:54:22 GMT60<![CDATA[Reply to Suggestions on home pfsense appliance that will handle porn blocking on Tue, 03 Oct 2023 05:19:13 GMT]]>@danno91

83eaa859-3cfd-4628-a823-bc128ec6006c-image.png

For a list to show blocked packets, your devices have to visit host names present in the list.
And your devices used on the pfSense LAN have to use pfSense as their your DNS.

]]>https://forum.netgate.com/post/1128205https://forum.netgate.com/post/1128205Tue, 03 Oct 2023 05:19:13 GMT<![CDATA[Reply to Suggestions on home pfsense appliance that will handle porn blocking on Mon, 02 Oct 2023 22:53:25 GMT]]>@michmoor

Interesting. I have what I believe is Steven's blacklist, though it doesn't block.

]]>https://forum.netgate.com/post/1128190https://forum.netgate.com/post/1128190Mon, 02 Oct 2023 22:53:25 GMT<![CDATA[Reply to Suggestions on home pfsense appliance that will handle porn blocking on Fri, 29 Sep 2023 02:33:05 GMT]]>@danno91 The mentioned UT1 list is big, and just to add to @Gertjan 's warning the smaller not-Max Netgate devices use eMMC storage not an SSD. If you were going to update a very large list frequently, I'd consider an SSD so you don't wear out the eMMC.

https://docs.netgate.com/pfsense/en/latest/troubleshooting/disk-lifetime.html
https://www.netgate.com/supported-pfsense-plus-packages

Another option with no RAM or disk use is to forward DNS to CloudFlare or another provider, e.g. 1.1.1.3:
https://blog.cloudflare.com/introducing-1-1-1-1-for-families/

Here is a PDF on how to block DNS over HTTP in pfSense so users can't get around the blocks:
https://github.com/jpgpi250/piholemanual#doh

]]>https://forum.netgate.com/post/1127804https://forum.netgate.com/post/1127804Fri, 29 Sep 2023 02:33:05 GMT<![CDATA[Reply to Suggestions on home pfsense appliance that will handle porn blocking on Fri, 29 Sep 2023 02:09:03 GMT]]>@danno91 you will need to add the blocklist to pfblocker

]]>https://forum.netgate.com/post/1127803https://forum.netgate.com/post/1127803Fri, 29 Sep 2023 02:09:03 GMT<![CDATA[Reply to Suggestions on home pfsense appliance that will handle porn blocking on Fri, 29 Sep 2023 01:46:11 GMT]]>@michmoor

I have this though it doesn't say anything about blocking porn. It says 'ADs_Basic - Steven Black - StevenBlack_ADs'

Steven-Black.png

]]>https://forum.netgate.com/post/1127799https://forum.netgate.com/post/1127799Fri, 29 Sep 2023 01:46:11 GMT<![CDATA[Reply to Suggestions on home pfsense appliance that will handle porn blocking on Thu, 28 Sep 2023 23:43:57 GMT]]>There are probably better porn lists out there than utilizing UT1.
Steven’s blacklist for example.

]]>https://forum.netgate.com/post/1127784https://forum.netgate.com/post/1127784Thu, 28 Sep 2023 23:43:57 GMT<![CDATA[Reply to Suggestions on home pfsense appliance that will handle porn blocking on Thu, 28 Sep 2023 23:41:12 GMT]]>Thank you sir. I will keep that in mind. I am leaning toward a more powerful unit. Thank you again for your thoughts. That is helpful.

]]>https://forum.netgate.com/post/1127783https://forum.netgate.com/post/1127783Thu, 28 Sep 2023 23:41:12 GMT<![CDATA[Reply to Suggestions on home pfsense appliance that will handle porn blocking on Thu, 28 Sep 2023 12:46:58 GMT]]>@danno91 said in Suggestions on home pfsense appliance that will handle porn blocking:

4100

Make that 4100 and opt for a 5100 or 'better'.

I use an "4100 MAX", and when I activated :

64a965f2-1258-4d78-8809-4d69ea616e90-image.png

this one and only list (a small subset of the total available porn offer) with 1,4 million domain names, which takes time to download (server side limited) and many minutes of parsing time, while doing so eats half of all memory (4 G) and now my 4100 starts to make usage of the swap space which is never a good sign - go to the memory usage stats.

'porn' is like 'cigarettes' and 'alcohol'. The latter was even forbidden for a while in the states (just think about it) : thinks become x times worse overnight.
For me it's not an issue any-more, although I have a 14 year old at home. Just show the good examples, and you did your part of the deal.
All very IMHO of course.

I bought my 4100 with just two criteria in mind : power usage - and 1 Gbits / sec handling on all 4 (minimal) ports.
I could buy a smaller router but that would mean the arm processor used would be way smaller as the one in my iPhone ..... that just doesn't seem right ;)

]]>https://forum.netgate.com/post/1127656https://forum.netgate.com/post/1127656Thu, 28 Sep 2023 12:46:58 GMT