Firewall - pfBlockerNG - Europe
Firewall - pfBlockerNG - Europe
Firewall - pfBlockerNG - Europe
General Update Alerts Reputation IPv4 IPv6 DNSBL GeoIP Logs Sync
Top 20 Africa Antarctica Asia Europe North America Oceania South America
Note: pfSense by default implicitly blocks all unsolicited inbound traffic to the WAN interface.
Therefore adding GeoIP based firewall rules to the WAN will not provide any benefit, unless there are open WAN ports.
It's also not recommended to block the 'world', instead consider rules to 'Permit' traffic from selected Countries only.
Also consider protecting just the specific open WAN ports and it's just as important to protect the outbound LAN traffic.
LINKS
List Action
Deny Inbound
Select the Action for Firewall Rules on lists you have selected.
Default: Disabled
Enable Logging
Enable
Default: Enable
Select - Logging to Status: System Logs: FIREWALL ( Log )
This can be overriden by the 'Global Logging' Option in the General Tab.
Configuring the Adv. Inbound Rule settings, will allow for more customization of the Inbound Auto-Rules.
Invert Source
Invert - Option to invert the sense of the match. ie - Not (!) Source Address(es)
Enable
Custom Port
Click Here to add/edit Aliases Do not manually enter port numbers.
Do not use 'pfB_' in the Port Alias name.
Custom Destination
Enable
Invert
Custom Destination
Click Here to add/edit Aliases Do not manually enter Addresses(es).
Do not use 'pfB_' in the 'IP Network Type' Alias name.
Select 'invert' to invert the sense of the match. ie - Not (!) Destination Address(es)
Custom Protocol
any
Default: any
Select the Protocol used for Inbound Firewall Rule(s).
Do not use 'any' with Adv. Inbound Rules as it will bypass these settings!
Custom Gateway
default
Select alternate Gateway or keep 'default' setting.
Invert Destination
Invert - Option to invert the sense of the match. ie - Not (!) Destination Address(es)
Enable
Custom Port
Click Here to add/edit Aliases Do not manually enter port numbers.
Do not use 'pfB_' in the Port Alias name.
Custom Source
Enable
Invert
Custom Source
Click Here to add/edit Aliases Do not manually enter Addresses(es).
Do not use 'pfB_' in the 'IP Network Type' Alias name.
Select 'invert' to invert the sense of the match. ie - Not (!) Source Address(es)
Custom Protocol
any
Default: any
Select the Protocol used for Outbound Firewall Rule(s).
Do not use 'any' with Adv. Outbound Rules as it will bypass these settings!
Custom Gateway
default
Select alternate Gateway or keep 'default' setting.
Save
Click to SAVE Settings and/or Rule edits. Changes are applied via CRON or 'Force Update'
pfSense is developed and maintained by Netgate. © ESF 2004 - 2019 View license.