26/06/2018 PRJGWSP.intranet.projectus.com.

br - Firewall: pfBlockerNG: Reputation

Reputation 

General Update Alerts Reputation IPv4 IPv6 DNSBL GeoIP Logs Sync

IPv4 Reputation
LINKS

Firewall Alias  Firewall Rules Firewall Logs

Why Reputation Matters:

By Enabling 'Reputation', each Blocklist will be analyzed for Repeat Offenders in each IP Range. 
Individual List Reputation

Enable Max

Enables Search for Repeat Offenders in a /24 Range on Each Individual Blocklist

 [ Max ] Setting

5
Default: 5
Maximum number of Repeat Offenders allowed in a Single IP Range

Collective List Reputation

Once all Blocklists are Downloaded, these two 'additional' processes [ pMax ] and [ dMax ]
Can be used to Further analyze for Repeat Offenders. 
Enable pMAX

Enables Search for Repeat Offenders in All BlockLists, Without Country Code Exclusion

 [ pMax ] Setting

50
Default: 50
Maximum number of Repeat Offenders

Enable dMAX

Enables Search for Repeat Offenders in All BlockLists Using Country Code Exclusion

 [ dMax ] Setting

5
Default: 5
Maximum number of Repeat Offenders

Country Code Settings (max/dMax)

http://187.75.209.246:81/pkg_edit.php?xml=/pfblockerng/pfblockerng_reputation.xml 1/2
26/06/2018 PRJGWSP.intranet.projectus.com.br - Firewall: pfBlockerNG: Reputation

When performing Queries for Repeat Offenders, you can choose to ignore Repeat Offenders in select Countries. The Original
Blocklisted IPs remain intact. All other Repeat Offending Country Ranges will be processed. 
ccwhite Action:

Ignore
Default: Ignore
Select the 'Action' format for ccwhite

ccblack Action:

Block
Default: Block
Select the 'Action' format for ccblack

IPv4 Country Exclusion

AA ASIA UNDEFINED 6255147 (408)

AA EUROPE UNDEFINED 6255148 (6349)
Afghanistan [1149361] AF (333)
Albania [783754] AL (174)
Algeria [2589581] DZ (92)
American Samoa [5880801] AS (20)
Andorra [3041565] AD (52)
Angola [3351879] AO (112)
Anguilla [3573511] AI (31)
Antarctica [6697173] AQ (10)
Antigua and Barbuda [3576396] AG (87)
Argentina [3865483] AR (1926)
Armenia [174982] AM (139)
Aruba [3577279] AW (32)
Australia [2077456] AU (7729)
Austria [2782113] AT (2267)
Azerbaijan [587116] AZ (143)
Bahamas [3572887] BS (65)
Bahrain [290291] BH (106)
Bangladesh [1210997] BD (927)
Select Countries you want to Exclude from the Reputation Process.
Use CTRL + CLICK to select/unselect countries

Proofpoint ET IQRISK IPv4 Reputation 

 Save

Click to SAVE Settings and/or Rule edits. Changes are applied via CRON or 'Force Update'

 pfSense is © 2004 - 2018 by Rubicon Communications, LLC (Netgate). All Rights Reserved. [view license] 

http://187.75.209.246:81/pkg_edit.php?xml=/pfblockerng/pfblockerng_reputation.xml 2/2