pfSense

Use the list as a URL Table alias and block it on WAN.

pfSense can use a remote list of addresses as a firewall alias that refreshes itself. Point it at the plain-text blocklist and block the alias on WAN.

Set it up

1. Go to Firewall › Aliases › URLs and click Add.
2. Set Type to URL Table (IPs), Name to isipsafe, and URL to:

   https://isipsafe.com/api/v1/blocklist?key=sl_your_key_here&format=txt&confidenceMinimum=75

   Set Update frequency to 1 day and save.
3. Go to Firewall › Rules › WAN, add a rule at the top: Action Block, Source Single host or alias isipsafe. Save and apply.
4. Optional: add the same rule on any other interface that faces the internet.

Refresh more often

The URL Table update frequency is in days. For hourly updates, install the pfBlockerNG package and add the same URL as an IPv4 list with a one-hour frequency; pfBlockerNG also handles IPv6 lists separately (&ipVersion=6).

Check it loaded under Diagnostics › Tables, table isipsafe.

Need a hand?

If something here does not work with your version of pfSense, or you have improved it, tell us. We update these pages with what people send.

pfSense and its logo are trademarks of their respective owners. isipsafe is not affiliated with or endorsed by them.