Pfsense block access to a Web site

Firewalls block access to a Web site as a basic feature, blocking access to a site on pfsense, usually through aliases and setting up firewall rules.

In this example, let's try to block access to the Sina Network (www.sina.com).

• Find a domain name resolution address

• Add Alias

• Set up firewall rules

• Check for blocking effects

Find an IP address

Pfsense aliases do not support domain names, we must first find out the IP address of the Sina network.

In Windows, run cmd, enter Nslookup www.sina.com, and look for the address of the domain name resolution that the SINA network corresponds to in DNS. In this example, 117.21.216.80.

Add Alias

• Enter the GUI interface of Pfsense

• Navigate to Firewall > alias Management >ip

• Click Add

• Add the IP address of the Sina network to the alias

• Click Save Settings
  

Set the rules for waterproofing walls

• Navigate to Firewall > Rule policies, Lan tab

• Add a rule at the top of the list

• Action Select block, source address Select any, destination address select single machine or alias, enter the alias name defined earlier

• Click Save Settings

Check for blocking effects

The firewall rules are already in effect, and now we have access to the web address of the www.sina.com Browser, which is inaccessible.

Pfsense block access to a Web site