pfBlockerNG stopped logging DNSBL
-
Good day. Please let me know how to bring back logging of blocked websites on Firewall > pfBlockerNG > Alerts > "DNSBL Block":
But the IP blocking are still logged:
The only change that day I think was enabling "Python Module" in Services > "DNS Resolver" > "General Settings"
If there were no issues the next step would have been to set Firewall > pfBlockerNG > DNSBL > "DNSBL Mode" from "Unbound mode" to "Unbound python mode". Will the logging return if I set "DNSBL Mode" to "Unbound python mode"?
The system is under 2.8.1-RELEASE (amd64) and this is the pfblockerNG main page settings:
Previously a log entry will be added for a website that was blocked:
But now there will be no log, although attempting to open an unauthorized website will be unsuccessful with error message of "Unable to connect". I don't know if this change in behavior is caused by enabling "Python module" in DNS Resolver
Here are screenshots of pfBlockerNG settings under DNSBL. Please let me know if there are other settings that need to be shown. Thank you
"DNSBL Groups" screenshot:
"Adult" category under "DNSBL Category" is also used:
I forgot which ones of the enable logging above I have enabled and then chose pfBlockerNG Update (update and also reload) but there was still no logging
This is the automatically-added entry in Floating firewall rule:
As an example here is the firewall rule for the captive portal VLAN:
-
Start by clicking on the blue :
A text shows up. Read it and moments later you'll ask yourself the question : "Why am I still using unbound mode" ?
Well, only you can answer that question.Select Python mode.
Save.
Goto Firewall > pfBlockerNG > Update and do a full Reload :: All.Optional : Goto Services > DNS Resolver > General Settings and check that you have :
About the DNSBL logging : example :
DNS traffic that 'hits' the DNSBL feed "ADs_Basic" won't log.
EasyList will log.The Null Block means that the http(s) web interface won't get shown when a web browser emuts a blocked DNSBL (== host name).
Not a big deal, as it won't get redirect anyway (all sites are https these days, and https can't be redirect with a huge browser error/warning).
As you've seen : this will be the message :
-
Thank you @Gertjan for the reply and sorry for the delayed response. When I go to Services > DNS Resolver > General Settings: there are no available python scripts in the drop down box:
Do I need to restart the pfsense machine before the available scripts will be shown in the dropdown box?
-
@richardsago said in pfBlockerNG stopped logging DNSBL:
When I go to Services > DNS Resolver > General Settings: there are no available python scripts in the drop down box:
The GUI Services > DNS Resolver > General Settings will show :
if and only if you've selected ( better save and reload ) :
Btw : the Services > DNS Resolver > General Setting "Python Module Script" option is more and informative field, not a option to chose from. It's a line where the resolvers (options) tells you : "found a pfb_python(.py) filer, and I, the resolver, will use it".
-
Thank you @Gertjan for the reply. We have changed acme settings in the middle of September and when I added the new host override in DNS Resolver I noticed I forgot to tick the Enable Python Module checkbox. I was thinking this (meaning I forgot to enable python module in DNS Resolver) could be the reason why we had internet issues when I set "DNSBL Mode" to "Unbound python mode" before. The school break is in a few weeks and I will try again to set DNSBL Mode to Unbound python mode.
Privacy Policy · Cookie Policy