Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Best way to manage pfblocker exceptions?

    Scheduled Pinned Locked Moved pfSense Packages
    1 Posts 1 Posters 1.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      miles267
      last edited by

      I recently subscribed to iblocklist and am using their default gzip (gz) format with pfsense's pfblocker.

      While I've noticed a significant # of packets being caught which I assume is an indicator it is working, I find myself spending more time appending to my pfblocker custom exception list of CIDRs that I wish to allow outbound access from client PCs. In fact, adding exceptions has become so tedious I've considered disabling pfblocker.

      Often am unaware of the many IPs being used by common tasks. Instead I must watch a site block occur, either try to ping the domain to return the IP or look in NTOP for the attempted packet destinations. Then add the x.x.x.0/24 CIDR to my exemption list.  Very time consuming and requires me to navigate back and forth between multiple different modules of the pfsense UI per CIDR.

      Surely there's a better way?

      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.