OPNsense Forum

Archive => 18.7 Legacy Series => Topic started by: sg on November 02, 2018, 06:19:25 pm

Title: block by domain like ngrok.io
Post by: sg on November 02, 2018, 06:19:25 pm

Hi, how would I go about blocking a whole domain... or at least making it more difficult to reach? For example, if I want to block access to ngrok.io sites, what could I do?

Title: Re: block by domain like ngrok.io
Post by: fabian on November 02, 2018, 06:35:25 pm

you can block it in DNS using a domain override - simple and usually enough. If you want to go further, you can look in BGP in which AS the IP range is and then you can make a rule for blocking the whole IP range.