The pfSense Store

Author Topic: pfBlockerNG v2.0 w/DNSBL  (Read 284581 times)

tirsojrp and 4 Guests are viewing this topic.

Offline doktornotor

  • Hero Member
  • *****
  • Posts: 8553
  • Karma: +956/-278
  • Not a pfSense employee, they cannot fire me...
    • View Profile
Re: pfBlockerNG v2.0 w/DNSBL
« Reply #15 on: November 20, 2015, 04:53:06 am »
Quote from: cmb link=topic=102470.msg5729
Those who were beta testing, it'd help if you can reinstall latest from the standard package repo and report back.

Done, all works pretty well (as before). :D
Do NOT PM for help!

Offline BBcan177

  • Moderator
  • Hero Member
  • *****
  • Posts: 2554
  • Karma: +797/-5
    • View Profile
    • Click for Support
Re: pfBlockerNG v2.0 w/DNSBL
« Reply #16 on: November 20, 2015, 05:54:18 am »
This has been merged, it'll be live in the package repo within at most ~15 minutes of the time of this post.

I largely relied on all your reports here for testing, only checking that the basics function and there isn't anything malicious, or grossly wrong at a glance. If there are issues, BBCan, please follow up with pull requests and I'll make sure one of us gets them merged promptly. Those who were beta testing, it'd help if you can reinstall latest from the standard package repo and report back.

Thanks BBCan!

Thanks Chris!  :)
"Experience is something you don't get until just after you need it."

 | http://pfblockerng.com | Twitter @BBcan177  | #pfBlockerNG |

Offline hda

  • Sr. Member
  • ****
  • Posts: 589
  • Karma: +30/-3
    • View Profile
Re: pfBlockerNG v2.0 w/DNSBL
« Reply #17 on: November 20, 2015, 06:08:11 am »
Package update succeeded on the second reinstall from v1.10, after ~11 min. on an Alix pfSense 2.2.5 (ro). Thank you BBcan :)

Update: I followed BBcan's instructions below for starting DNSBL and that worked too. Excellent extension.

« Last Edit: November 20, 2015, 07:06:04 am by hda »

Offline BBcan177

  • Moderator
  • Hero Member
  • *****
  • Posts: 2554
  • Karma: +797/-5
    • View Profile
    • Click for Support
Re: pfBlockerNG v2.0 w/DNSBL
« Reply #18 on: November 20, 2015, 06:15:07 am »
Here are some basic instructions to get started with DNSBL.

1) Open the pfBNG "DNSBL" Tab:

(Use the defaults unless you have a need to use otherwise)
Enter the DNSBL VIP as 10.10.10.1
Enter the DNSBL Listening Port as 8081
Enter the DNSBL SSL Listening port as 8443
Select the DNSBL Listening Interface as Lan

For the DNSBL Firewall Rule select all of the LAN subnets that access the DNS Resolver.
Ensure that all Devices that use the DNS Resolver, have the Resolver as its only DNS setting for DNSBL to function properly.

DNSBL IP Firewall Rule Settings:
Select Deny outbound or as per your requirements
select Enable logging

Alexa   (is optional, you can skip this until later if you wish)
Select Top 1K
Select the TLD Inclusions as ca,co,com,io,me,net,org or as required.

In the Custom List you may enter any domain you wish to Whitelist.

Save your settings


2) Open the "DNSBL Feeds" Tab:

Create a new DNSBL Alias

Enter DNS Group Name as ADs
Enter Description as DNSBL ADverts

DNSBL:

Enter the Header/Label and Source URL as follows:
(Use copy/paste as plain text for the URL)

Format Auto and State ON

yoyo
http://pgl.yoyo.org/adservers/serverlist.php?hostformat=hosts&mimetype=plaintext

hpHosts_ads
http://hosts-file.net/ad_servers.txt

Adaway
https://adaway.org/hosts.txt

Cameleon
http://sysctl.org/cameleon/hosts


Select List Action as Unbound
Select Update Frequency as Once a day
 
Alexa:
Do not enable the Alexa Whitelist for this ADverts based alias, as Alexa also posts the top ADvert servers. So using Alexa whitelist, will interfere with ADvert Blocking.

Add any other domains that you wish to block in the Custom List.

Save your settings


3) Open the "DNSBL" Tab:

Click DNSBL Enable checkbox.
Save your settings


4) Open the "Update" Tab:

Select Force Update

You should now see the DNSBL Feeds being downloaded and parsed. Once that is complete, goto the Dashboard, and confirm that the widget is populated correctly.

5) Goto the pfBlockerNG "Alerts" Tab:

Any domain that is blocked will be reported here. For HTTPS alerts, the SRC IP and URL are not captured due to Browser security measures.

As a test, goto www.aol.com  and www.yahoo.com  and see some alerts populate.

There are several other DNSBL Feeds that can be used with pfBNG DNSBL. I will post that at a later date, once users get their basic configurations working. There is also an ADBlock Easylist tab, which is pretty self-explanatory.
"Experience is something you don't get until just after you need it."

 | http://pfblockerng.com | Twitter @BBcan177  | #pfBlockerNG |

Offline ecfx

  • Full Member
  • ***
  • Posts: 221
  • Karma: +28/-11
    • View Profile
Re: pfBlockerNG v2.0 w/DNSBL
« Reply #19 on: November 20, 2015, 06:23:06 am »
...

I largely relied on all your reports here for testing, only checking that the basics function and there isn't anything malicious, or grossly wrong at a glance.
...
Those who were beta testing, it'd help if you can reinstall latest from the standard package repo and report back.

Thanks BBCan!

uninstalled test 77 DEV and installed 2.0 from official on 2 boxes v2.2.4 & v2.2.5

At first look it was ok, up and running but I see that I have to manual start service
Code: [Select]
dnsbl pfBlockerNG DNSBL Web Server to be fully functional.
This service not running after update is something that I had before when beta testing on all boxes.

Offline ntct

  • Jr. Member
  • **
  • Posts: 64
  • Karma: +8/-0
    • View Profile
Re: pfBlockerNG v2.0 w/DNSBL
« Reply #20 on: November 20, 2015, 08:30:39 am »
I also update from dev to 2.0, it work properly, a powerful package

Thanks! BBcan177

Offline wcrowder

  • Full Member
  • ***
  • Posts: 118
  • Karma: +12/-5
    • View Profile
Re: pfBlockerNG v2.0 w/DNSBL
« Reply #21 on: November 20, 2015, 09:42:44 am »
Those who were beta testing, it'd help if you can reinstall latest from the standard package repo and report back.

Thanks BBCan!

Done, ran the standard tests, all good. Thanks for all the work BB!

Offline pfcode

  • Full Member
  • ***
  • Posts: 236
  • Karma: +11/-0
    • View Profile
Re: pfBlockerNG v2.0 w/DNSBL
« Reply #22 on: November 20, 2015, 10:16:04 am »
Work like a charm, Thanks! For some reason, First attempt stuck at the 'Downloading MaxMind databases' part. Second attempt worked.
Release: pfSense 2.4.2(amd64)
M/B: Supermicro A1SRi-2558F
HDD: Intel X25-M 160G
RAM: 2x8Gb Kingston ECC ValueRAM
AP: Netgear R7000 (XWRT), Unifi AC Pro

Offline vito

  • Full Member
  • ***
  • Posts: 198
  • Karma: +3/-0
    • View Profile
Re: pfBlockerNG v2.0 w/DNSBL
« Reply #23 on: November 20, 2015, 10:45:00 am »
Work like a charm, Thanks! For some reason, First attempt stuck at the 'Downloading MaxMind databases' part. Second attempt worked.

I had this also, second time worked fine
prior, i was on the latest build of PFB 1.x

Offline BBcan177

  • Moderator
  • Hero Member
  • *****
  • Posts: 2554
  • Karma: +797/-5
    • View Profile
    • Click for Support
Re: pfBlockerNG v2.0 w/DNSBL
« Reply #24 on: November 20, 2015, 11:14:11 am »
Looks like I have a file caching issue with the download function. I will get that resolved asap and add the relevant download code directly to the install code.
"Experience is something you don't get until just after you need it."

 | http://pfblockerng.com | Twitter @BBcan177  | #pfBlockerNG |

Offline Bastion

  • Jr. Member
  • **
  • Posts: 27
  • Karma: +1/-0
    • View Profile
Re: pfBlockerNG v2.0 w/DNSBL
« Reply #25 on: November 20, 2015, 11:52:09 am »
Installed and configured with DNSBL, all went smoothly and working flawlessly since.

Great package by great people ! Many thanks BBcan177

Offline Wolf666

  • Full Member
  • ***
  • Posts: 277
  • Karma: +31/-1
    • View Profile
Re: pfBlockerNG v2.0 w/DNSBL
« Reply #26 on: November 20, 2015, 01:34:14 pm »
After months of testing I just installed pfBlockerNG 2.0 from official repository, everything is ok.
Thanks BBCan, ottimo lavoro amico mio!
Modem Draytek Vigor 130
pfSense 2.4 Supermicro A1SRi-2558 - 8GB ECC RAM - Intel S3500 SSD 80GB - M350 Case
Switch Cisco SG350-10
AP Netgear R7000 (Stock FW)
HTPC Intel NUC5i3RYH
NAS Synology DS1515+
NAS Synology DS213+

Offline JasonJoel

  • Full Member
  • ***
  • Posts: 114
  • Karma: +15/-2
    • View Profile
Re: pfBlockerNG v2.0 w/DNSBL
« Reply #27 on: November 20, 2015, 04:53:43 pm »
For some reason, First attempt stuck at the 'Downloading MaxMind databases' part. Second attempt worked.

Ditto. Worked on 2nd try.

I setup DNSBL per the instructions above, and it looks like everything is worked as advertised. Great work!

Jason

Offline Ibor Daru

  • Newbie
  • *
  • Posts: 20
  • Karma: +0/-0
    • View Profile
Re: pfBlockerNG v2.0 w/DNSBL
« Reply #28 on: November 20, 2015, 05:27:26 pm »
Excellent!!!

Confirmed also: second try (simply reinstalled package after first update attempt)

Really great job. Where can I donate?

Offline trinidadrancheria

  • Jr. Member
  • **
  • Posts: 39
  • Karma: +2/-0
    • View Profile
Re: pfBlockerNG v2.0 w/DNSBL
« Reply #29 on: November 20, 2015, 06:12:26 pm »
Installed, It stopped at the same place as most others, being lazy I refreshed which reinstalled it again :D (3 less clicks than packages/reinstall/confirm) :P

Working GREAT! Gonna enable DNSBL for INBOUND Monday (using Alias) :)