pfsense: Blocking Threats With pfblockerNG Lists

Tutorial: pfsense and pfBlockerNG Version 3

Graylog Tutorial

Connecting With Us
---------------------------------------------------

Lawrence Systems Shirts and Swag
---------------------------------------------------

AFFILIATES & REFERRAL LINKS
---------------------------------------------------
Amazon Affiliate Store

UniFi Affiliate Link

All Of Our Affiliates that help us out and can get you discounts!

Gear we use on Kit

Use OfferCode LTSERVICES to get 10% off your order at

Digital Ocean Offer Code

HostiFi UniFi Cloud Hosting Service

Protect you privacy with a VPN from Private Internet Access

Patreon

⏱️ Timestamps ⏱️

00:00 Blocking Threat Actors & Tor with pfblocker
01:51 Settings for pfblocker
04:24 pfblocker feeds
08:09 Rule Settings
09:35 Downloading, Updating, and Enabling List Rules
11:05 How The FIrewall Rules Work
12:05 Firewall Rule Testing and Logging
15:41 GEOIP

#pfsense #firewall #pfblocker

[RandomTechChannel]

Great video Tom! We need more content like this since pfBlockeNG's developer has very limited time to write any kind of technical documentation. Thanks!

[Valkyrien]

Only semi-related to the video, but through this I discovered most of my DNSbl entries weren't configured properly and had all ended up disabled for some reason, so thanks for giving me cause to poke around my router today.

[ntfury]

You sir are awesome. My pfblockerng is up and running perfectly for what I need. Because of this and a few other videos of yours that I consumed, I am now a subsriber.

[adminema]

just another bombastic video 💣 from master tom. thank you very much sir, as always! greetings from buenos aires

[michnl]

You Shall Pass!! Love it!! LOTR : ) Thanks for sharing your opinion on how to set PfBlockerNG, great that you update this how-to .

[Linux-sl]

Another great video, I just wanted to say thank you for all your videos! One more request, sometimes it would be nice if you would speak a little slower, I would have a few milliseconds more time in my head to translate it into German :D Thanks for everything, greetings from German

[scbtripwire]

I've been using the Geo-blocking to block outbound connections to countries like Russia, China, and North Korea. Sure malware can easily get around that kind of block, but seeing as I never visit sites from those places, there's no harm in making it that little bit more complicated for them (as well as closing potential holes due to disguised malicious download links/scripts). :)

[agpct]

Thank you ! Thank you! Thank you! I was just looking at adding some TOR lists. Your video also brought out some other things that I did not know. I know these videos take some time, but brother I appreciate it. I always learn something.
Thanks to NetGate as well for maintaining such a great product.

[rogerosbu]

Excellent video, Tom! I've been needing to get this installed and configured on my 6100. That's done now, thanks to you!

[hXr]

Amazing, together with Crowdsec a strong starting point!

[pipi_delina]

Thanks Tom... I have been trying to do dns filtering but it mainly fails and breaks... Hope you can do a video on how to properly configure pfblocker and Snort

[bobcat_the_Lion]

My problem is finding out which blocklist is blocking me from accessing a legitimate website. Lawrence's firewall loglist showed which rule caused the block. Is that a setting, do I need to upgrade to pfSense plus or what?

[bigchew]

Very Cool Video as usual Tom..I am still runing PfSense on my Dell R210II with a old Xeon E3 1220 Quad Core & 8gb of ecc it still seams to work good..thinking about going to a Xeon e3 2675 v2 but i think i may at some point !

[GregE]

I currently have GeoIP enabled to only allow U.S. IPs to a VPN Port .. I am looking to be able to restrict it further to just a single State within the US. And yes I know the lists are not 100% accurate. but it is a start. Is there a good way to accomplish this without having to pay for the MaxMind City Lists?

[diavuno]

I'm now a couple months late, but would you consider doing a updated PF blocker? I've noticed the interface is quite different

[RunningDigger]

I'm not sure whether I'm doing something wrong, but when I add the GepIp Blocks on pfblocker, no rules were added to the firewall

[philof]

If I have a personal server and only a few people within my country would even access it. It guess it would make sense to block geolocation other than my country

[ReplicatorReplicator]

Hello. How to use pfblockerng in conjunction with DoT? ADs blocking does not work.

[Alkaiser]

Would you use Crowdsec over pfblocker now that crowdsec has submitted a pkg for approval

[TheBeardedLibertarian]

Another great vid on pFsense, could you think about doing one on getting a SONOS system to work across the LAN an iOt networks with pFsense?