Changes

Talk:PFSense and OPNsense

807 bytes added, 31 January
/* hosts (www.facebook.com, www.tiktok.com , www.discord.com ) */ new section
The following lines were added (+) and removed (-):
== hosts (www.facebook.com, www.tiktok.com , www.discord.com ) ==Some websites like digitalocean for example is actually behind cloudflares reverse proxy. If you have any website like this on your alias and it resolves cloudflares proxy IP. If these proxy IPs end up being blocked half of the internet will be broken for you. Plenty of sites use CDNs or have backend resources proxied by cloudflare. DNS based blockers are far better for your needs.* https://old.reddit.com/r/PFSENSE/comments/12ifu1p/cant_get_a_simple_block_rule_to_work_for_all_the/The pfBlockerNG package (pfBlocker-NG Package) offers mechanisms which can be useful in this area, such as DNSBL, geographic IP address blocking, and automation of AS lookups.* https://docs.netgate.com/pfsense/en/latest/recipes/block-websites.html
Bureaucrat, administrator
16,192
edits