What is pfBlockerNG?

Overview. pfBlockerNG is a very powerful package for pfSense® which provides advertisement and malicious content blocking along with geo-blocking capabilities.

How does pfBlockerNG work?

pfBlockerNG works by blocking content in two ways – DNS Blocking (DNSBL) and IP v4 & v6 blocking (IPBL). For IPv4/IPv6, pfBlocker converts IP lists into Aliases and Firewall rules to match the pfBlocker setting for each list.

How to Set up pfBlockerNG?

1) Log in to pfSense GUI. 2) Choose System > Package Manager. 3) Choose Available packages then scroll down to pfBlockerNG and clock Save. 4) Once the package is installed, choose Firewall > pfBlockerNG….Instructions

1. Enable pfBlockerNG.
2. De-Duplication.
3. CIDR Aggregation.
4. Suppression.
5. Global Logging (optional)

How do I whitelist pfBlocker?

Performing the Whitelisting First, to add a domain to the whitelist, go to pfBlockerNG -> DNSBL -> DNSBL -> Custom Domain Whitelist. At the bottom of the list, add the domain you’d like to unblock and click Save.

How much RAM do I need for pfSense?

1 GB
pfSense Hardware Requirements and Guidance

Can pfSense block ads?

To block ads pfsense uses a special package called pfBlockerNG, this package can also be chosen to block malware, adult sites, and many more. This package has two parts DNSBL (DNS blocking) and GeoIP blocking but to block ads, we only need to configure the dnsbl portion.

Is pfSense still good?

pfSense is an excellent firewall – It logs all of your traffic. pfSense is an excellent load-balancer: (Multi-WAN and Server Load Balancing) The fail-over/aggregation works very well. This is perfect if your business uses multiple ISP’s to ensure your customers are always able to access their data.

Does pfSense need lots of RAM?

Snort and Suricata are pfSense packages for network intrusion detection. Depending on their configuration, they can require a significant amount of RAM. 1 GB should be considered a minimum but some configurations may need 2 GB or more, not counting RAM used by the operating system, firewall states, and other packages.

What does pfblocker-ng do for pfSense?

pfBlocker-NG introduces an Enhanced Alias Table Feature to pfSense® software. Assigning many IP address URL lists from sites like I-blocklist to a single alias and then choose a rule action. Blocking countries and IP ranges. Replacement of both Countryblock and IPblocklist by providing the same functionality, and more, in one package.

How to set custom rules for pfblocker-ng?

Many new options to choose what to block and how to block. Network lists may be used for custom rules. Set the interfaces to be monitored by pfBlocker-NG (both inbound and outbound), where the inbound is the Internet connection.

How is pfblocker loaded into a DNS resolver?

Before we get to installation and configuration, its worth understanding how pfBlocker takes raw blocklists and turns them into a final blocklist which is loaded into the firewall and/or DNS Resolver. Its actually a fairly complex process so this is a simplified representation.

Do you need a firewall to use pfblocker?

pfblocker requires at least one firewall entry (any interface) for it to be active. One way to verify is to check the front page widget. pfBlocker always moves its rules to the top, how can I stop this? Change rule action to Alias only and then apply custom rules using pfBlocker aliases with an arbitrary sequence.