IP Blocklists (Specifically iBlocklist)

[novafiddler]

hello,

I thought I'd give OPNSense a try (i'm a pfsense user). One thing I really miss is pfBlocker. It's kind of a deal breaker. I used to be able to input custom blocklists configured from iBlocklist into pfBlocker and it would download the archive and create the alias.

In opnsense, I cannot even create the URL table alias by hand. I believe the issue is that opnsense cannot understand dat/p2p/cidr formatted text files within an archive.

I know I can do a cron script to do all of this for me, but I'm not going to do that when pfSense does it automatically. Is there a way I can create an auto updating alias using iBlocklist .gz formatted blocklists?

[franco]

Hi novafiddler,

Welcome of course. I can understand your point to use the tool that works, but please note that pfBlocker(NG) didn't happen automatically in pfSense, it was contributed by a currently underfunded community member.

In this case it seems that the URL download does not support compressed files.

Unzipping is easy, dealing with multiple files/directories enclosed can be a bit tricky, not letting us provide the addition on short notice, but it looks like a good idea to include in 17.1.

Do you have an example URL of such a file for me?


Thanks,
Franco

[bobbis]

Hello,

please improve the Alias "/usr/local/opnsense/scripts/filter/lib/alias.py" to support additional formats like: gz/dat/p2p/cidr ! It's almost 4 years gone that Alias cant support other stuff as plaintext format.
https://iblocklist.com is a very good source for bad IP's and similiar...

Thanks

[franco]

It's over 5 years since we use GitHub for feature requests, too.

Also, please do not hijack threads...

...also, please do not reopen old tickets that have been answered.

(All of these things should go without saying.)


Cheers,
Franco

[fctr]

OK, so what's the final decision? Can we use iBlockList, or not? If so, is there a wiki page about setting it up? If not, what's it going to cost to have that feature added?