====== PFSense - pfBlockerNG ======

pfBlockerNG extends the capability of the pfSense firewall beyond the traditional stateful firewall.  

pfBlockerNG adds the ability to allow/deny decisions based upon items such as Geo-location, IP address, Alexa rating and the Domain Name.

The lists of IP addresses, Domain Names and Geo-Locations are usually provided by third parties.

<WRAP info>
**NOTE:**  **pfblockerNG** Domain Name (DNSBL) blocking only functions with the **DNS Resolver** service active.

  * It will not function with the **DNS Forwarder** service active.
  * If you need DNS Forwarding functionality, it is highly recommended to enable forwarding mode in the DNS Resolver service.

</WRAP>

----

[[PFSense:pfBlockerNG:Add DNSBL Feeds|Add DNSBL Feeds]]

[[PFSense:pfBlockerNG:Blocklists|Blocklists]]

[[PFSense:pfBlockerNG:Bypass pfBlockerNG for specific clients|Bypass pfBlockerNG for specific clients]]

[[PFSense:pfBlockerNG:DNSBL|DNSBL]]

[[PFSense:pfBlockerNG:Install pfBlockerNG|Install pfBlockerNG]]

[[PFSense:pfBlockerNG:IP|IP]]

[[PFSense:pfBlockerNG:Selectively enforcing pfBlockerNG for specific clients or networks|Selectively enforcing pfBlockerNG for specific clients or networks]]

[[PFSense:pfBlockerNG:Stats and Graphs|Stats and Graphs]]

[[PFSense:pfBlockerNG:Test|Test]]

[[PFSense:pfBlockerNG:Troubleshooting|Troubleshooting]]

[[PFSense:pfBlockerNG:Whitelisting|Whitelisting]]

----

===== References =====

https://docs.netgate.com/pfsense/en/latest/packages/pfblocker.html

https://forum.netgate.com/topic/91736/pfblockerng-v2-0-w-dnsbl

https://www.linuxincluded.com/block-ads-malvertising-on-pfsense-using-pfblockerng-dnsbl/

https://github.com/jmdugan/blocklists/blob/master/corporations/facebook/all