Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PfBlocker

    Scheduled Pinned Locked Moved pfSense Packages
    896 Posts 143 Posters 1.3m Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • panzP
      panz
      last edited by

      Ok, I'm going to dedupe the lists. Where is the lists' list stored? Even after a package reinstall, the list is there.

      pfSense 2.3.2-RELEASE-p1 (amd64)
      motherboard: MSI C847MS-E33 Micro ATX (with Intel Celeron CPU 847 @ 1.10 GHz) ~ PSU: Corsair VS350 ~ RAM: Kingston KVR1333D3E9S 4096 MB 240-pin DIMM DDR3 SDRAM 1.5 volt ~ NIC: Intel EXPI9301CTBLK (LAN) ~ NIC: D-Link DFE-528TX (CAM) ~ Hard Disk: Western Digital WD10JFCX Red ~ Case: Cooler Master HAF XB ~ power consumption: 21 Watts.

      1 Reply Last reply Reply Quote 0
      • S
        Supermule Banned
        last edited by

        Could we make a pfblocker community so we easily can share files and lists?

        Maybe from within the package itself?

        1 Reply Last reply Reply Quote 0
        • panzP
          panz
          last edited by

          I'm emailing to I-Blocklist maintainer to ask him if he could implement a deduplication feature in the customized lists section. For now, I'll be happy if the pfBlocker package could handle a memory increase by itself. I don't want to mess with file editing in an appliance.

          pfSense 2.3.2-RELEASE-p1 (amd64)
          motherboard: MSI C847MS-E33 Micro ATX (with Intel Celeron CPU 847 @ 1.10 GHz) ~ PSU: Corsair VS350 ~ RAM: Kingston KVR1333D3E9S 4096 MB 240-pin DIMM DDR3 SDRAM 1.5 volt ~ NIC: Intel EXPI9301CTBLK (LAN) ~ NIC: D-Link DFE-528TX (CAM) ~ Hard Disk: Western Digital WD10JFCX Red ~ Case: Cooler Master HAF XB ~ power consumption: 21 Watts.

          1 Reply Last reply Reply Quote 0
          • S
            Supermule Banned
            last edited by

            Not a bad idea.

            @panz:

            I'm emailing to I-Blocklist maintainer to ask him if he could implement a deduplication feature in the customized lists section. For now, I'll be happy if the pfBlocker package could handle a memory increase by itself. I don't want to mess with file editing in an appliance.

            1 Reply Last reply Reply Quote 0
            • D
              digdug3
              last edited by

              Just wait for a pfBlocker update… ::)

              1 Reply Last reply Reply Quote 0
              • S
                Supermule Banned
                last edited by

                Is MArcello still developing this?

                @digdug3:

                Just wait for a pfBlocker update… ::)

                1 Reply Last reply Reply Quote 0
                • W
                  wcrowder
                  last edited by

                  It is being very actively forked, we will just have to wait for an announcement from the author doing the update… Or, you could read this thread more carefully.  ;D Did you read the thread I posted to you Panz?  :-*

                  @Supermule:

                  Is MArcello still developing this?

                  @digdug3:

                  Just wait for a pfBlocker update… ::)

                  1 Reply Last reply Reply Quote 0
                  • S
                    Supermule Banned
                    last edited by

                    Thanks! We need forks :)

                    1 Reply Last reply Reply Quote 0
                    • W
                      wcrowder
                      last edited by

                      <shaking head="">:-\ and thinking out loud… In the 30yrs I've done this every good Forum has a Troll.

                      @Supermule:

                      Thanks! We need forks :)</shaking>

                      1 Reply Last reply Reply Quote 0
                      • S
                        Supermule Banned
                        last edited by

                        And youre doing it better than ANY out there ;)

                        @wcrowder:

                        <shaking head="">:-\ and thinking out loud… In the 30yrs I've done this every good Forum has a Troll.

                        @Supermule:

                        Thanks! We need forks :)</shaking>

                        1 Reply Last reply Reply Quote 0
                        • S
                          Supermule Banned
                          last edited by

                          Wasnt me…dont use that at all

                          1 Reply Last reply Reply Quote 0
                          • W
                            wcrowder
                            last edited by

                            Neither do I…

                            @Supermule:

                            Wasnt me…dont use that at all

                            1 Reply Last reply Reply Quote 0
                            • F
                              f34rinc
                              last edited by

                              I really like the idea of blocking entire countries that my network has no business connecting to and put together a script to update pfBlockers country CIDR lists with the lists available from IPdeny.com

                              Edit - The script didn't work as intended and has been taken down

                              The download is at the bottom of http://legoclan.com/pfsense/  all feedback is welcome

                              1 Reply Last reply Reply Quote 0
                              • S
                                simby
                                last edited by

                                Hi!

                                How can i fix this on PF 2.2 BETA?

                                Crash report begins.  Anonymous machine information:

                                amd64
                                10.1-PRERELEASE
                                FreeBSD 10.1-PRERELEASE #28 30e366f(HEAD)-dirty: Fri Sep 19 23:30:48 CDT 2014    root@pf22-amd64-snap:/usr/obj.amd64/usr/pfSensesrc/src/sys/pfSense_SMP.10

                                Crash report details:

                                PHP Errors:
                                in /usr/local/pkg/pfblocker.inc on line 256

                                1 Reply Last reply Reply Quote 0
                                • BBcan177B
                                  BBcan177 Moderator
                                  last edited by

                                  @f34rinc:

                                  I really like the idea of blocking entire countries that my network has no business connecting to and put together a script to update pfBlockers country CIDR lists with the lists available from IPdeny.com

                                  The download is at the bottom of http://legoclan.com/pfsense/  all feedback is welcome

                                  Hi f34rinc,

                                  This will update the ISO files for pfBlocker but it doesn't update the XML Continent Files (ie - Africa) with the changes made to the Country Names. So there could be some inconsistencies.

                                  There are files named

                                  Africa_cidr.txt that have this type of header:

                                  Continent: Africa

                                  Country: Reunion

                                  ISO Code: RE

                                  Total Networks: 245

                                  These files are used by this command to rebuild the XML files based upon the 6 Continent Files.

                                  /usr/local/bin/php /usr/local/www/pfblocker.php uc

                                  "Experience is something you don't get until just after you need it."

                                  Website: http://pfBlockerNG.com
                                  Twitter: @BBcan177  #pfBlockerNG
                                  Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                                  1 Reply Last reply Reply Quote 0
                                  • BBcan177B
                                    BBcan177 Moderator
                                    last edited by

                                    @simby:

                                    Hi!

                                    How can i fix this on PF 2.2 BETA?

                                    Crash report begins.  Anonymous machine information:

                                    amd64
                                    10.1-PRERELEASE
                                    FreeBSD 10.1-PRERELEASE #28 30e366f(HEAD)-dirty: Fri Sep 19 23:30:48 CDT 2014    root@pf22-amd64-snap:/usr/obj.amd64/usr/pfSensesrc/src/sys/pfSense_SMP.10

                                    Crash report details:

                                    PHP Errors:
                                    in /usr/local/pkg/pfblocker.inc on line 256

                                    This error doesn't seem to be related to Country Blocking. Maybe its one of your Lists that is failing? Which lists are you using?

                                    "Experience is something you don't get until just after you need it."

                                    Website: http://pfBlockerNG.com
                                    Twitter: @BBcan177  #pfBlockerNG
                                    Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                                    1 Reply Last reply Reply Quote 0
                                    • F
                                      f34rinc
                                      last edited by

                                      Thank you BBcan177 I don't believe I have the skill set to accomplish this

                                      Edit - I took the country list of top spammers from http://www.projecthoneypot.org/spam_server_top_countries.php and made a script to make my own replacement for the pfBlocker top spammers list.  Please use the link from my previous post above.

                                      1 Reply Last reply Reply Quote 0
                                      • W
                                        wbennett77
                                        last edited by

                                        Hi there,
                                        Total newbie to Pfsense here. I have installed Pfblocker but and added a few countries to block. It is enabled, logging enabled and "deny inbound" is selected for the countries I chose. When I look at the status i see that the status is a red arrow (down). Am I missing something?
                                        Thanks

                                        Dell Optiplex 390 Pfsense 2.2 / Asus AC56U Wireless AP / Asus Switch

                                        1 Reply Last reply Reply Quote 0
                                        • BBcan177B
                                          BBcan177 Moderator
                                          last edited by

                                          PfBlocker will not add an Inbound Rule if there are no other rules on the WAN. So you just need to create a dummy rule and it will populate the Auto Rules.

                                          "Experience is something you don't get until just after you need it."

                                          Website: http://pfBlockerNG.com
                                          Twitter: @BBcan177  #pfBlockerNG
                                          Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                                          1 Reply Last reply Reply Quote 0
                                          • W
                                            wbennett77
                                            last edited by

                                            @BBcan177:

                                            PfBlocker will not add an Inbound Rule if there are no other rules on the WAN. So you just need to create a dummy rule and it will populate the Auto Rules.

                                            Being a eager to learn newbie, how and where would I create a dummy rule. Sorry if this has been asked before.

                                            Update: Got it working. Dummy rule created on the wan did the trick. I disabled the rule after pfblocker started working and all is still good.

                                            Cheers!

                                            Dell Optiplex 390 Pfsense 2.2 / Asus AC56U Wireless AP / Asus Switch

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.