Need help to convert iptables/dnsmasq scripts under pfSense

pfcode

Hi, All

I'm really a newbie to PfSense, I have currently a NetGear R7000 (DD-WRT) router, and try building my old computer as a PfSense firewall router. Under my R7000 router,

there is a firewall script (see below), how to implement under PfSense:

#Speed up YouTube
iptables -A INPUT -s 173.194.55.0/24 -j DROP
iptables -A INPUT -s 206.111.0.0/16 -j DROP

I have some scripts under Router's DNSmasq commands (see below), how to implement under PfSense:

address=/router.home/192.168.1.1
address=/voip.home/192.168.1.114
address=/nas1.home/192.168.1.107
address=/nas2.home/192.168.1.123

Thanks much for the help.

William

doktornotor

1/ You create a block rule via the GUI. Not sure what's the point though, all inbound traffic from WAN is blocked by default.
2/ You can use this as is in Services - DNS Forwarder - Advanced, or use the GUI to set up the same Host Overrides.

pfcode

@doktornotor:

1/ You create a block rule via the GUI. Not sure what's the point though, all inbound traffic from WAN is blocked by default.

You may see here: http://www.dslreports.com/forum/r28071070-How-to-Reddit-YouTube-firewall-rule-with-MI424wr

doktornotor

The block rule needs to go to LAN interface(s), with those ranges as destination. (Certainly does not speed up anything here.)

pfcode

@doktornotor:

2/ You can use this as is in Services - DNS Forwarder - Advanced, or use the GUI to set up the same Host Overrides.

I got this setup, but when try entering "router.home" at the browser, I got error:

Potential DNS Rebind attack detected, …., try accessing the router by IP address instead of by host name

How to solve this?

Thanks

doktornotor

By reading the notes in the GUI. System - Advanced - Admin Access (DNS Rebind Check, Alternate Hostnames).

pfcode

@doktornotor:

By reading the notes in the GUI. System - Advanced - Admin Access (DNS Rebind Check, Alternate Hostnames).

Appreciated. Lots of stuff to learn for me.

killmasta93

#Speed up YouTube
iptables -A INPUT -s 173.194.55.0/24 -j DROP
iptables -A INPUT -s 206.111.0.0/16 -j DROP

pfcode does it really speed up youtube? I thought youtube had a large amount of ip tables. I tried blocking them all failed miserable. LOLZ :-[

pfcode

@killmasta93:

#Speed up YouTube
iptables -A INPUT -s 173.194.55.0/24 -j DROP
iptables -A INPUT -s 206.111.0.0/16 -j DROP
pfcode does it really speed up youtube? I thought youtube had a large amount of ip tables. I tried blocking them all failed miserable. LOLZ :-[
[/quote]

Yes. it does sometime.