pfblocker report issue
-
hi there
netgate 7100 users here i have strange situation here, LAN 192.168.80.x/xx is the only selected/highlighted on pfblocker but the reports is on the other side of the tvsets vlan.range of 120.50.0x/xx tried to reinstall the package twice but the issue still. does anyone to figure it out whats going on, see images attached
Thanks
-
@publictoiletbowl I think you are misunderstanding the two different features of pfBlockerNG:
1: The IP filtering engine which blocks contact with offending IP adresses using firewall rules.
2: The DNSBL DNS filtering engine with "blocks" resolution of certain DNS names to prevent clients using those sites - this does NOT involve firewall rules.
Your first screenshot is related to which interfaces automatic firewall rules for the IP engine (#1) works on.
Your second screenshot is logs from DNSBL (#2) with by default always will work for all clients across all interfaces as this in DNS names being blocked by the DNS server on pfSense (not interface specific).
-
@keyser hi sir please ignore my post i figure it out now to make it work i added in dns resolver/custom option. i get this instruction from someone who posted hehe https://forum.netgate.com/topic/129365/bypassing-dnsbl-for-specific-ips
thank yo man
server:
access-control-view: 120.10.0.0/21 bypass
access-control-view: 192.168.40.0/21 bypass
access-control-view: 120.50.0.0/21 bypass
access-control-view: 192.168.80.0/24 dnsbl
access-control-view: 192.168.100.0/24 dnsbl
access-control-view: 192.168.101.0/24 dnsbl
access-control-view: 192.168.200.0/24 dnsbl
access-control-view: 172.100.0.0/24 dnsbl
view:
name: "bypass"
view-first: yes
view:
name: "dnsbl"
view-first: yes