Block access to a website via pfSense

Firewall blocking access to a website is a basic function, blocking access to a website on pfSense can usually be done by aliasing and setting firewall rules.


In this example, let's try to block access to Sina.com (www.sina.com).


  • Find the domain name resolution address

  • Add alias

  • Set firewall rules

  • Check for blocking effects


Find IP address

The alias of pfSense does not support domain names, we must first find out the IP address of Sina.com.


In Windows, run cmd and enter Nslookup www.sina.com to find the corresponding domain name resolution address of Sina.com in DNS. In this case 117.21.216.80.

5.PNG


Add alias

  • Enter the GUI interface of pfSense

  • Navigate to Firewall > Alias ​​Management > IP

  • Click to add

  • Add Sina's IP address to the alias

  • Click to save settings

1.png

2.png


Set up wall rules

  • Navigate to Firewall > Rules & Policies, lan tab

  • Add a rule to the top of the list

  • Select block for action, select any for source address, select single machine or alias for destination address, and enter the alias name defined earlier

  • Click to save settings

3.png

3.1.png


Check for blocking effects

The firewall rules have taken effect, and now we enter the website of Sina.com www.sina.com in the browser to access, and it is no longer accessible.

4.PNG



Guess you like

Origin http://43.154.161.224:23101/article/api/json?id=324607265&siteId=291194637