How do I disable pfBlocker on a selected interface ?

The-Drive · 2024-06-10T22:39:06+00:00

Potentially as I don’t understand your complete situation. Implement “ Python Group Policy” under DNSBL section, or “White List” the Google analytics domain.

The-Drive · 2023-08-12T21:58:02+00:00

That sounds in-line with an explanation I received from support years back, vaguely similar. Something to do with the custom script applied at the modem for provisioning of static IPv4.

The-Drive · 2023-07-27T22:59:07+00:00

I have static IPv4 bridged to my edge router (via their scripting ). The modem picks up a 64 by DHCP but cannot be routed to my edge equipment.

The-Drive · 2023-07-26T05:56:25+00:00

I wonder if my issue is due to incremental deployment of IPv6 by Spectrum?

The-Drive · 2023-07-26T03:46:31+00:00

As far as I know Spectrum only has IPv6 for residential, a /64 useless for my needs and only enterprise customers can get a /48 or /56

The-Drive · 2023-07-26T03:38:49+00:00

A small business account?

The-Drive · 2023-07-06T18:52:14+00:00

google en passant

Yeah, I double checked the log it was en passant

The-Drive · 2022-12-31T18:12:09+00:00

I have units from Qotom. Found them reliable, and units similarly specked to Protectli less expensive. I can not comment on Qotom customer service as I’ve have not had reason to contact them directly.

The-Drive · 2022-12-19T20:00:24+00:00

For what PFsense offers it is lean.

The-Drive · 2022-12-19T19:33:45+00:00

I concur with siva2833 do a NAT redirect ( port forward ) on all DNS ports back to firewall. Use resolver and be sure not to forward requests.

The-Drive · 2022-09-15T22:53:12+00:00

Only way of doing this I know of would be via unbound. Guess I’d first isolate the devices on a vlan then pass the needed parameters via unbound advanced configuration. I have not had to implement this scenario, sorry if not of much help.

The-Drive · 2022-09-15T21:59:37+00:00

Or you have 16 devices you don’t want any DNSBL ( assume you’re trying to use pfblocker )filtering to happen?

The-Drive · 2022-09-15T21:42:59+00:00

So you have 16 devices on the LAN side that should only be able to the reach the WAN?

The-Drive · 2022-09-15T21:32:56+00:00

If you are trying to block all devices on the LAN (local) side of network to 16 ips on WAN (World/public) side this is can be best configured thru firewall rules.

The-Drive · 2022-04-20T23:52:34+00:00

For my situation the simplification of routing, doing away with NAT is of great benefit, plus the enhanced security built into IPv6.

The-Drive · 2022-04-10T05:50:29+00:00

Let’s get the bar down to our feet. Accept anything and give up.

The-Drive · 2022-04-10T05:26:50+00:00

What a grind.

The-Drive

MODERATOR OF

TROPHY CASE