Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PfBlocker

    Scheduled Pinned Locked Moved pfSense Packages
    896 Posts 143 Posters 1.3m Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • W
      wcrowder
      last edited by

      The xx.txt files need to be there. They are the county code files for country blocking. The duplicates I was talking about are IP's in the lists. Example: On the iBlockList website the iBlock Prime list already includes the US Government, Malicious, Piracy Related, Pornography, Ads and Trackers and Proxies lists so when you add Prime AND those lists you have DUPLICATION that you don't need…

      @panz:

      Yes, I removed the duplicates: I logged into pfSense with WinSCP and manually deleted those jsjdjdjjdjjddkkakirtitjjf.txt files. Then I deleted the pfBlocker package and all the files in the upper pkg dir that contained the word pfBlocker.

      Strangely enough, after pfBlocker reinstallation, all the lists were still there, listed in the GUI, so maybe do I need to purge other files?

      1 Reply Last reply Reply Quote 0
      • panzP
        panz
        last edited by

        Ok, I'm going to dedupe the lists. Where is the lists' list stored? Even after a package reinstall, the list is there.

        pfSense 2.3.2-RELEASE-p1 (amd64)
        motherboard: MSI C847MS-E33 Micro ATX (with Intel Celeron CPU 847 @ 1.10 GHz) ~ PSU: Corsair VS350 ~ RAM: Kingston KVR1333D3E9S 4096 MB 240-pin DIMM DDR3 SDRAM 1.5 volt ~ NIC: Intel EXPI9301CTBLK (LAN) ~ NIC: D-Link DFE-528TX (CAM) ~ Hard Disk: Western Digital WD10JFCX Red ~ Case: Cooler Master HAF XB ~ power consumption: 21 Watts.

        1 Reply Last reply Reply Quote 0
        • S
          Supermule Banned
          last edited by

          Could we make a pfblocker community so we easily can share files and lists?

          Maybe from within the package itself?

          1 Reply Last reply Reply Quote 0
          • panzP
            panz
            last edited by

            I'm emailing to I-Blocklist maintainer to ask him if he could implement a deduplication feature in the customized lists section. For now, I'll be happy if the pfBlocker package could handle a memory increase by itself. I don't want to mess with file editing in an appliance.

            pfSense 2.3.2-RELEASE-p1 (amd64)
            motherboard: MSI C847MS-E33 Micro ATX (with Intel Celeron CPU 847 @ 1.10 GHz) ~ PSU: Corsair VS350 ~ RAM: Kingston KVR1333D3E9S 4096 MB 240-pin DIMM DDR3 SDRAM 1.5 volt ~ NIC: Intel EXPI9301CTBLK (LAN) ~ NIC: D-Link DFE-528TX (CAM) ~ Hard Disk: Western Digital WD10JFCX Red ~ Case: Cooler Master HAF XB ~ power consumption: 21 Watts.

            1 Reply Last reply Reply Quote 0
            • S
              Supermule Banned
              last edited by

              Not a bad idea.

              @panz:

              I'm emailing to I-Blocklist maintainer to ask him if he could implement a deduplication feature in the customized lists section. For now, I'll be happy if the pfBlocker package could handle a memory increase by itself. I don't want to mess with file editing in an appliance.

              1 Reply Last reply Reply Quote 0
              • D
                digdug3
                last edited by

                Just wait for a pfBlocker update… ::)

                1 Reply Last reply Reply Quote 0
                • S
                  Supermule Banned
                  last edited by

                  Is MArcello still developing this?

                  @digdug3:

                  Just wait for a pfBlocker update… ::)

                  1 Reply Last reply Reply Quote 0
                  • W
                    wcrowder
                    last edited by

                    It is being very actively forked, we will just have to wait for an announcement from the author doing the update… Or, you could read this thread more carefully.  ;D Did you read the thread I posted to you Panz?  :-*

                    @Supermule:

                    Is MArcello still developing this?

                    @digdug3:

                    Just wait for a pfBlocker update… ::)

                    1 Reply Last reply Reply Quote 0
                    • S
                      Supermule Banned
                      last edited by

                      Thanks! We need forks :)

                      1 Reply Last reply Reply Quote 0
                      • W
                        wcrowder
                        last edited by

                        <shaking head="">:-\ and thinking out loud… In the 30yrs I've done this every good Forum has a Troll.

                        @Supermule:

                        Thanks! We need forks :)</shaking>

                        1 Reply Last reply Reply Quote 0
                        • S
                          Supermule Banned
                          last edited by

                          And youre doing it better than ANY out there ;)

                          @wcrowder:

                          <shaking head="">:-\ and thinking out loud… In the 30yrs I've done this every good Forum has a Troll.

                          @Supermule:

                          Thanks! We need forks :)</shaking>

                          1 Reply Last reply Reply Quote 0
                          • S
                            Supermule Banned
                            last edited by

                            Wasnt me…dont use that at all

                            1 Reply Last reply Reply Quote 0
                            • W
                              wcrowder
                              last edited by

                              Neither do I…

                              @Supermule:

                              Wasnt me…dont use that at all

                              1 Reply Last reply Reply Quote 0
                              • F
                                f34rinc
                                last edited by

                                I really like the idea of blocking entire countries that my network has no business connecting to and put together a script to update pfBlockers country CIDR lists with the lists available from IPdeny.com

                                Edit - The script didn't work as intended and has been taken down

                                The download is at the bottom of http://legoclan.com/pfsense/  all feedback is welcome

                                1 Reply Last reply Reply Quote 0
                                • S
                                  simby
                                  last edited by

                                  Hi!

                                  How can i fix this on PF 2.2 BETA?

                                  Crash report begins.  Anonymous machine information:

                                  amd64
                                  10.1-PRERELEASE
                                  FreeBSD 10.1-PRERELEASE #28 30e366f(HEAD)-dirty: Fri Sep 19 23:30:48 CDT 2014    root@pf22-amd64-snap:/usr/obj.amd64/usr/pfSensesrc/src/sys/pfSense_SMP.10

                                  Crash report details:

                                  PHP Errors:
                                  in /usr/local/pkg/pfblocker.inc on line 256

                                  1 Reply Last reply Reply Quote 0
                                  • BBcan177B
                                    BBcan177 Moderator
                                    last edited by

                                    @f34rinc:

                                    I really like the idea of blocking entire countries that my network has no business connecting to and put together a script to update pfBlockers country CIDR lists with the lists available from IPdeny.com

                                    The download is at the bottom of http://legoclan.com/pfsense/  all feedback is welcome

                                    Hi f34rinc,

                                    This will update the ISO files for pfBlocker but it doesn't update the XML Continent Files (ie - Africa) with the changes made to the Country Names. So there could be some inconsistencies.

                                    There are files named

                                    Africa_cidr.txt that have this type of header:

                                    Continent: Africa

                                    Country: Reunion

                                    ISO Code: RE

                                    Total Networks: 245

                                    These files are used by this command to rebuild the XML files based upon the 6 Continent Files.

                                    /usr/local/bin/php /usr/local/www/pfblocker.php uc

                                    "Experience is something you don't get until just after you need it."

                                    Website: http://pfBlockerNG.com
                                    Twitter: @BBcan177  #pfBlockerNG
                                    Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                                    1 Reply Last reply Reply Quote 0
                                    • BBcan177B
                                      BBcan177 Moderator
                                      last edited by

                                      @simby:

                                      Hi!

                                      How can i fix this on PF 2.2 BETA?

                                      Crash report begins.  Anonymous machine information:

                                      amd64
                                      10.1-PRERELEASE
                                      FreeBSD 10.1-PRERELEASE #28 30e366f(HEAD)-dirty: Fri Sep 19 23:30:48 CDT 2014    root@pf22-amd64-snap:/usr/obj.amd64/usr/pfSensesrc/src/sys/pfSense_SMP.10

                                      Crash report details:

                                      PHP Errors:
                                      in /usr/local/pkg/pfblocker.inc on line 256

                                      This error doesn't seem to be related to Country Blocking. Maybe its one of your Lists that is failing? Which lists are you using?

                                      "Experience is something you don't get until just after you need it."

                                      Website: http://pfBlockerNG.com
                                      Twitter: @BBcan177  #pfBlockerNG
                                      Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                                      1 Reply Last reply Reply Quote 0
                                      • F
                                        f34rinc
                                        last edited by

                                        Thank you BBcan177 I don't believe I have the skill set to accomplish this

                                        Edit - I took the country list of top spammers from http://www.projecthoneypot.org/spam_server_top_countries.php and made a script to make my own replacement for the pfBlocker top spammers list.  Please use the link from my previous post above.

                                        1 Reply Last reply Reply Quote 0
                                        • W
                                          wbennett77
                                          last edited by

                                          Hi there,
                                          Total newbie to Pfsense here. I have installed Pfblocker but and added a few countries to block. It is enabled, logging enabled and "deny inbound" is selected for the countries I chose. When I look at the status i see that the status is a red arrow (down). Am I missing something?
                                          Thanks

                                          Dell Optiplex 390 Pfsense 2.2 / Asus AC56U Wireless AP / Asus Switch

                                          1 Reply Last reply Reply Quote 0
                                          • BBcan177B
                                            BBcan177 Moderator
                                            last edited by

                                            PfBlocker will not add an Inbound Rule if there are no other rules on the WAN. So you just need to create a dummy rule and it will populate the Auto Rules.

                                            "Experience is something you don't get until just after you need it."

                                            Website: http://pfBlockerNG.com
                                            Twitter: @BBcan177  #pfBlockerNG
                                            Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.