PfBlockerNG v2.0 w/DNSBL

mk6032

That is the Legend for the Package Manager ::)

So now look a the pfBlockerNG line and interpreting the legend the status of the package is "Current"

Ah, my bad! The lack of a separator there as opposed to the ones above it is a bit confusing ( http://imgur.com/a/lwSFx ).

Regards,
Matt

doktornotor

@mk6032:

@RonpfS:

That is the Legend for the Package Manager ::)

So now look a the pfBlockerNG line and interpreting the legend the status of the package is "Current"

Ah, my bad! The lack of a separator there as opposed to the ones above it is a bit confusing ( http://imgur.com/a/lwSFx ).

Regards,
Matt

LOL, ok… https://redmine.pfsense.org/issues/7203

RonpfS

@doktornotor:

LOL, ok… https://redmine.pfsense.org/issues/7203

Maybe just add "Legend : "

doktornotor

@RonpfS:

@doktornotor:

LOL, ok… https://redmine.pfsense.org/issues/7203

Maybe just add "Legend : "

Yeah I tried and that looked even worse than now. Leaving this to someone else.

Redyr

Hello,

Regarding Adaway,

https://adaway.org/hosts.txt

Although the list is downloaded:

[ Adaway ] Downloading update .. 200 OK. completed ..

I got this error:

[ pfB_Adaway Adaway ] List Error ]

Please advise

BBcan177

I assume that Adaway is also the name of the Alias?

Do you have anything in the custom list at the bottom of this alias? I think that's the part that's not parsing properly. Anything in a custom list must be formatted properly.

Redyr

@BBcan177:

I assume that Adaway is also the name of the Alias?

Do you have anything in the custom list at the bottom of this alias? I think that's the part that's not parsing properly. Anything in a custom list must be formatted properly.

The name of the alias is Adaway, and I don't have anything in the custom list.

I've changed the name of the alias, and the label like this:

Adaway_list ] Downloading update .. 200 OK. completed ..
[ pfB_Adaway1 Adaway_list ] List Error ]

BBcan177

It looks like you added this list to the IPv4 tab when it's a domain based list and should only be used in the DNSBL tab.

Redyr

@BBcan177:

It looks like you added this list to the IPv4 tab when it's a domain based list and should only be used in the DNSBL tab.

I removed it from IPV4, sorry to bother you with this.

Thank you

yodaphone

@BBcan177:

Here are more DNSBL Feeds that can be used in pfBlockerNG.
(Copy and paste URLS as plain text)

Create a new alias for these.
These are not necessarily ADvert domains. So I named mine "Malicious"

malc0de
https://malc0de.com/bl/BOOT

I get this error for malc0de. all other lists are fine

[ DNSBL_Malicious - malc0de ] Download FAIL [ 02/21/17 01:21:47 ]
Firewall and/or IDS are not blocking download.

Set up exactly the way you have described.

I'm on 2.3.3 RC

BBcan177

@yodaphone:

I get this error for malc0de. all other lists are fine

[ DNSBL_Malicious - malc0de ] Download FAIL [ 02/21/17 01:21:47 ]
Firewall and/or IDS are not blocking download.

Not having any issues with that feed… Try to

ping malc0de.com

and see if it responds… Check the Alerts Tab to see if any alerts get reported... Could be Snort/Suricata, or another Firewall rule....

HeatmiserNYC

Hey BBCAN,
Is there a way to get Reek's anti-adblocking list to work under Pfblocker? This would be extremely convenient.

My apologies if this has been asked a trillion times before….

BBcan177

@HeatmiserNYC:

Is there a way to get Reek's anti-adblocking list to work under Pfblocker? This would be extremely convenient

Unfortunately not. DNSBL can't manipulate the browser except for sinkholing the DNS request.

Brutos

Does anyone have a good list for blocking porn sites please?b

I have google and searched and cant find any.

pfBasic

@Brutos:

Does anyone have a good list for blocking porn sites please?b

I have google and searched and cant find any.

https://forum.pfsense.org/index.php?topic=125863.0

D0X

@BBcan177:

@D0X:

Thanks for your support so far, but for now I've given up on pfblockerng. Not that the package is flawed, but Safari on OSX and IOS is driving me nuts.

NP…. Should you decide to pick it backup at some point, try to see why the Ping/Browse to the DNSBL VIP wasn't working. That will cause issues on its own.... also since it was one Domain that was predominantly causing issues, you could also Whitelist it...

Quoting this old post, but the problem is still occurring. Tried PfblockerNG again this morning, but all Apple devices still bombards me with certificate errors.

BBcan177

@D0X:

Quoting this old post, but the problem is still occurring. Tried PfblockerNG again this morning, but all Apple devices still bombards me with certificate errors.

Is this with Safari, or all other browsers?

Can you review this link:
https://forum.pfsense.org/index.php?topic=124945.msg691099#msg691099

Does anyone have a good list for blocking porn sites please?b

There are more options to get better results and for porn sites an OpenDNS account might be a good solution as well!
Squid & SquidGuard or DansGuardian plus pfBlockerNG & DNSBL plus an OpenDNS account

D0X

@BBcan177:

@D0X:

Quoting this old post, but the problem is still occurring. Tried PfblockerNG again this morning, but all Apple devices still bombards me with certificate errors.

Is this with Safari, or all other browsers?

Can you review this link:
https://forum.pfsense.org/index.php?topic=124945.msg691099#msg691099

Safari indeed, on all devices, moving to another browser is not an option here. Doing the mod you suggested, no logging whatsoever will work?

Running Pi-Hole here for a few days now, as an alternative. But this means adding another box to my network. Plus the config is a little weird (pfSense DCHP server forwarding Pi-Hole dns address to clients, clients using Pi-Hole and Pi-Hole using the pfSense DNS Resolver again as its upstream DNS, don't know, feels weird).

BBcan177

Both solutions use Lighttpd and both push a 1x1 pix. Strange that it doesn't show any cert errors… Will have to do some digging...

In the link, there is another option to drop just the HTTPS alerts with a firewall rule.