Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PfBlockerNG Custom Source Aliasproblem

    Scheduled Pinned Locked Moved pfBlockerNG
    10 Posts 4 Posters 653 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H
      hadiaghajani
      last edited by

      I have a problem with pfBlockerNG 3.2.0_8 in pfsense version 2.7.2
      I create an IPv4 rule in PfBlockerNG , in Advanced Outbound Firewall Rule Settings , i checked Custom Source and I wrote alias name, but it doesn't show alias record to select, I wrote alias name without select and save, pfsense show's this error:

      Fatal error: Uncaught TypeError: array_key_exists(): Argument #2 ($array) must be of type array, null given in /usr/local/www/pfblockerng/pfblockerng_category_edit.php:447 Stack trace: #0 {main} thrown in /usr/local/www/pfblockerng/pfblockerng_category_edit.php on line 447 PHP ERROR: Type: 1, File: /usr/local/www/pfblockerng/pfblockerng_category_edit.php, Line: 447, Message: Uncaught TypeError: array_key_exists(): Argument #2 ($array) must be of type array, null given in /usr/local/www/pfblockerng/pfblockerng_category_edit.php:447 Stack trace: #0 {main} throw

      sorry my English is not good

      1 Reply Last reply Reply Quote 0
      • R
        rvoosterhout
        last edited by

        I have the same problem. When entering an Custom Source, the dropdown to select the alias doesn't show up. Saving the IPv4 list with the alias name without selecting the alias give me the same error as the topic starter.

        GertjanG H 2 Replies Last reply Reply Quote 0
        • GertjanG
          Gertjan @rvoosterhout
          last edited by

          @rvoosterhout

          Create the file first ?

          Here :

          4eee9ed4-fe01-4ab4-a873-3dea5088a2d6-image.png

          As the guidelines "blue I" says, I've created a file first. I've called my file 'filename'.
          Here it is :

          3134819c-2309-47e2-bcb0-99ac8dae0aa7-image.png

          I've put this into it : a random IPv4 :

          10.11.12.13
          

          @rvoosterhout said in PfBlockerNG Custom Source Aliasproblem:

          Saving the IPv4 list with the alias name without selecting the alias give me the same error as the topic starter.

          Indeed, not a beautiful recovery.
          But BS in is BS out ^^

          No "help me" PM's please. Use the forum, the community will thank you.
          Edit : and where are the logs ??

          R 1 Reply Last reply Reply Quote 0
          • R
            rvoosterhout @Gertjan
            last edited by rvoosterhout

            @Gertjan I mean in the 'Advanced Inbound Firewall Rule Settings' under 'Custom Destination'. OP has the problem in the Advanced Outbound Firewall Rule Settings in the 'Custom Source', but same issue.

            Bob.DigB GertjanG 2 Replies Last reply Reply Quote 0
            • Bob.DigB
              Bob.Dig LAYER 8 @rvoosterhout
              last edited by

              @rvoosterhout Don't use it, why would you.

              R 1 Reply Last reply Reply Quote 0
              • GertjanG
                Gertjan @rvoosterhout
                last edited by

                @rvoosterhout said in PfBlockerNG Custom Source Aliasproblem:

                @Gertjan I mean in the 'Advanced Inbound Firewall Rule Settings' under 'Custom Destination'. OP has the problem in the Advanced Outbound Firewall Rule Settings in the 'Custom Source', but same issue.

                Whatever I fill in here, that is, an alias that contains IP addresses like :

                0281d7f4-2b4f-4f56-94f1-8fde1f77dc7f-image.png

                So when I enter 10_15 under Custom Destination it doesn't 'stick' after the Save.
                No errors, though, but that's probably normal as I use this version :

                06f00c7b-343a-45fc-9000-f5be33b72239-image.png

                983567a4-ff94-4cf8-a5cb-2a90322a5d55-image.png

                No "help me" PM's please. Use the forum, the community will thank you.
                Edit : and where are the logs ??

                1 Reply Last reply Reply Quote 0
                • R
                  rvoosterhout @Bob.Dig
                  last edited by rvoosterhout

                  @Bob-Dig Why would I not, could you please explain? Maybe there is a better solution for my needs, I'm only a beginner networking engineer and still learning.
                  I have a firewall rule that allows traffic from the WAN to a webserver port 443 running on 192.168.1.5. What I'm trying to do is to instead of opening my network to anybody from the outside, limit the requests only to pass if they originate from the IP addresses from the Cloudflare Proxy servers, since that is where my DNS is hosted.
                  So I created an entry in PfB under IPv4, called it Whitelist_CloudFlare, and as IPv4 Source Definitions I'm using the list provided by CloudFlare. https://www.cloudflare.com/ips-v4/#
                  Using this method, I'm sure that the IPs from CF are always up to date, since they get pulled every hour.
                  To have PfB create and manage the firewall rule, I want to use the Advanced Inbound Firewall Rule Settings, with the custom DST port set to 443 and the Custom Destination to my webserver.

                  Again, please let me know if there is a better way to do this.

                  Bob.DigB 1 Reply Last reply Reply Quote 0
                  • Bob.DigB
                    Bob.Dig LAYER 8 @rvoosterhout
                    last edited by

                    @rvoosterhout I would create an alias native with pfb and make the rule yourself.
                    If you really want to do it your way, don't forget to select TCP and or UDP too.

                    R 1 Reply Last reply Reply Quote 2
                    • R
                      rvoosterhout @Bob.Dig
                      last edited by

                      @Bob-Dig That's a good idea and exactly what I'm trying to do. Thank you

                      1 Reply Last reply Reply Quote 0
                      • H
                        hadiaghajani @rvoosterhout
                        last edited by

                        @rvoosterhout I found the problem , when you create Alias , change type to NETWORK

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.