Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    How i can block a domain range ?

    Scheduled Pinned Locked Moved General pfSense Questions
    10 Posts 5 Posters 4.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      asd0109
      last edited by

      i know in  Services–->DNS forwarder  i can block a domain name

      but how can i block *.163.com  ??

      Snap3.jpg
      Snap3.jpg_thumb

      1 Reply Last reply Reply Quote 0
      • P
        Perry
        last edited by

        I would use the service from http://opendns.com

        /Perry
        doc.pfsense.org

        1 Reply Last reply Reply Quote 0
        • A
          asd0109
          last edited by

          @Perry:

          I would use the service from http://opendns.com

          ??? ??? ???

          1 Reply Last reply Reply Quote 0
          • GruensFroeschliG
            GruensFroeschli
            last edited by

            Opendns offers to option for registered users to block domains.
            Point the pfSense to the openDNS server (208.67.222.222 208.67.220.220) and create a firewall rule blocking outgoing dns traffic.
            Like this you force your users to use the pfSense as DNS server.
            Which then resolves through openDNS which provides the option to blacklist domains.

            We do what we must, because we can.

            Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

            1 Reply Last reply Reply Quote 0
            • A
              asd0109
              last edited by

              @GruensFroeschli:

              Opendns offers to option for registered users to block domains.
              Point the pfSense to the openDNS server (208.67.222.222 208.67.220.220) and create a firewall rule blocking outgoing dns traffic.
              Like this you force your users to use the pfSense as DNS server.
              Which then resolves through openDNS which provides the option to blacklist domains.

              oh ,  thank you very much !!! :)

              i think if pfsense can set DNS blacklist/whitelist would be better. :)  don`t need to rely on other means.

              1 Reply Last reply Reply Quote 0
              • C
                Cino
                last edited by

                check out DNS BlackList package:

                http://forum.pfsense.org/index.php/topic,19590.0.html

                1 Reply Last reply Reply Quote 0
                • C
                  cmb
                  last edited by

                  Just add a domain override to some IP that doesn't exist, or won't respond for that domain.

                  1 Reply Last reply Reply Quote 0
                  • A
                    asd0109
                    last edited by

                    @Cino:

                    check out DNS BlackList package:

                    http://forum.pfsense.org/index.php/topic,19590.0.html

                    thank you very much !

                    1 Reply Last reply Reply Quote 0
                    • A
                      asd0109
                      last edited by

                      @cmb:

                      Just add a domain override to some IP that doesn't exist, or won't respond for that domain.

                      i undestand , like this

                      www.a.com  –->  1.0.0.1

                      but how to block ?

                      www.a.com
                      bbs.a.com
                      news.a.com
                      mail.a.com
                      ...
                      ...
                      ...

                      i want know how to block  " *.a.com "    :)

                      thank for your concern

                      1 Reply Last reply Reply Quote 0
                      • C
                        cmb
                        last edited by

                        Use the domain override. send a.com to some IP that won't resolve for that domain.

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.