IP Blocklists (Specifically iBlocklist)

[novafiddler]

hello,

I thought I'd give OPNSense a try (i'm a pfsense user). One thing I really miss is pfBlocker. It's kind of a deal breaker. I used to be able to input custom blocklists configured from iBlocklist into pfBlocker and it would download the archive and create the alias.

In opnsense, I cannot even create the URL table alias by hand. I believe the issue is that opnsense cannot understand dat/p2p/cidr formatted text files within an archive.

I know I can do a cron script to do all of this for me, but I'm not going to do that when pfSense does it automatically. Is there a way I can create an auto updating alias using iBlocklist .gz formatted blocklists?

[franco]

Hi novafiddler,

Welcome of course. I can understand your point to use the tool that works, but please note that pfBlocker(NG) didn't happen automatically in pfSense, it was contributed by a currently underfunded community member. :)

In this case it seems that the URL download does not support compressed files.

Unzipping is easy, dealing with multiple files/directories enclosed can be a bit tricky, not letting us provide the addition on short notice, but it looks like a good idea to include in 17.1.

Do you have an example URL of such a file for me?


Thanks,
Franco

[bobbis]

Hello,

please improve the Alias "/usr/local/opnsense/scripts/filter/lib/alias.py" to support additional formats like: gz/dat/p2p/cidr ! It's almost 4 years gone that Alias cant support other stuff as plaintext format.
https://iblocklist.com is a very good source for bad IP's and similiar...

Thanks

[franco]

It's over 5 years since we use GitHub for feature requests, too. ;)

Also, please do not hijack threads...

...also, please do not reopen old tickets that have been answered.

(All of these things should go without saying.)


Cheers,
Franco

[fctr]

OK, so what's the final decision? Can we use iBlockList, or not? If so, is there a wiki page about setting it up? If not, what's it going to cost to have that feature added?

[UpUVC]

For reference:
https://github.com/opnsense/plugins/pull/808 =>https://github.com/alectrocute/UnboundBL *Mar 18, 2019
                                                                                                            v
                                                                    =>https://github.com/hurricanehrndz/unhBlock *Apr 10, 2020


https://docs.opnsense.org/manual/how-tos/dnscrypt-proxy.html