next »

[kilthro]

Oh i c. That makes sense. Right now seems to be ok but if I see performance issues, I will take that in mind and change it up.

[trafficking]

Firstly, thank you for the excellent package.  I greatly enjoy using 3rd party lists to do IP blocking and have pfblocker configured and running the way I like it.  That said, I do have a couple questions.

1) I prefer to block inbound and outbound connections on all interfaces and use pfblocker aliases with 2 floating rules to do this.  Is this the preferred method or is there another way I am missing?

2) Not directly a pfblocker question, but in what order are floating rules applied?  Do they come before or after the individual interface rules?

Thank you very much for all your hard work!

[marcelloc]

1) I prefer to block inbound and outbound connections on all interfaces and use pfblocker aliases with 2 floating rules to do this.  Is this the preferred method or is there another way I am missing?

Define action as alias only and create your rules. That's the best way.

[justsomeguy6575]

This seems like a very good package. However I'm having trouble getting lists to work properly.

I can make a list with this url in gz format and it works fine and creates an alias:
http://list.iblocklist.com/?list=bt_spyware&fileformat=p2p&archiveformat=gz

For some reason no matter what I try I can't get this list to load in either txt or gz format. No alias is created and nothing is blocked.
https://zeustracker.abuse.ch/blocklist.php?download=ipblocklist

Any ideas? Thanks

[marcelloc]

For some reason no matter what I try I can't get this list to load in either txt or gz format. No alias is created and nothing is blocked.
https://zeustracker.abuse.ch/blocklist.php?download=ipblocklist

This list is in txt format and returns only ips, not CIDR or ip ranges.

so,

 

version 1.0.1 is out with:

• fixed pfBlocker to check lists with single ips
• updated country ip files
• Return of Deny Both action(Inbound and Outbound)
• Improved some GUI info

[justsomeguy6575]

Wow.. thanks marcello! New version seems to work great.

Nice work, thanks again

[vg8open]

Thank you for a great package!  I just have one minor request for this package.  Can you add more granular options for the list update frequency?  Something like the attached image?

Thanks,

-Brian

[KongGulerod]

Thanx for a great package - I like how it integrates and uses pfSense 2.0 firewall aliases and WAN/LAN rules :-)

A small observation and fix request (latest pfSense 2.0 release + latest pfBlocker):

After placing the pfBlocker widget on the bottom part of my long pfSense 2.0 dashboard page with vertical scrollbar, I observed that the dashboard page/scrollbar automatically reverted back to the top of the page at a fixed interval (every 5-10 secs).

This is a bit annoying if I am looking at data from a widget in the bottom part of the dashboard page - and every 5-10 seconds the page jumps to the top (internal pfBlocker refresh?) and I have to manually use the scrollbar/mouse/arrow-keys to navigate back down to the bottom of the page.

If I temp. removed the pfBlocker widget from dashboard the mis-behaviour went away also.

Hope you can reproduce this scenario and look forward to next release :-)

[marcelloc]

I observed that the dashboard page/scrollbar automatically

Thanks for the feedback.

I`ve removed scroll call in widget.

reinstall package in about 15 minutes.


If you have many widgets, consider testing widescreen package. It may help you.

[AhnHEL]

Reinstalled and now I'm not getting any CIDRs or Packets in the widget.

[marcelloc]

fixed javascript again, try reinstall in 15 minutes.

[LEPM]

pf 2.0 i386 + squid+squidguard+pfblocker 1.0 and 1.0.1 works very well (deny inbound)

pfblocker 1.0.1+ deny both, crash pfsense!!
reboot and crash,crash...
changing to deny inbound,works well again

[marcelloc]

Can you be more specific on what kind of crash you have?

I'm using deny both with no issues or crashes.
Boot process is fine too.

[KongGulerod]

I`ve removed scroll call in widget.
reinstall package in about 15 minutes.

Seems to work fine now... no forced scrolling to the top when refreshing numbers.

Thanx !!

[AhnHEL]

Getting this error now trying to enable pfBlocker, and the widget still looks like the pic i posted above.

Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 10499768 bytes) in /usr/local/pkg/pfblocker.inc on line 281