pfBlockerNG

A pfSense package that adds IP blocklists, country blocking and DNS blocklists to the firewall.

FreeProprietarySelf-hosted
Official websitedocs.netgate.com

These buttons open the developer's own site, repository or store listing in a new tab. wares.gg does not host downloads.

About pfBlockerNG

pfBlockerNG extends pfSense software with enhanced alias tables, so many IP address lists can be combined into one alias and attached to firewall rules. It supports blocking by country and IP range, frequently updated lists, XMLRPC sync and a dashboard widget.

Its DNS blocklist feature filters domains for ads, trackers and threats across the whole network. It is installed from inside pfSense, so it suits people who already run a pfSense firewall and want network-wide filtering without a separate DNS server.

Strengths

  • Network-wide IP and DNS blocklists from the firewall
  • Country and IP range blocking
  • Lists can be reused in custom firewall rules
  • Dashboard widget and XMLRPC sync

Limitations

  • Only runs on pfSense
  • Many options make setup involved for newcomers

Details

Pricing
FreeInstalled as a package within pfSense software; the documentation lists no separate charge.
License
Proprietary
Platforms
Self-hosted
How it runs
Self-hosted
Account
Not required
Best suited for
pfSense users who want ad, tracker and threat blocking for every device on the network
Last verified
Added
Provenance
Facts checked against the developer's own pages and store listings, 1 sources on file.

Alternatives to pfBlockerNG

Compare all

Software that can replace pfBlockerNG for an important use case, and what changes if you switch.

  • Pi-hole

    A DNS server for your home network that refuses to look up ad and tracker domains, for every device at once.

    FreeOpen sourceLinuxSelf-hostedWeb

    Pi-hole runs on a separate Linux machine and blocks by DNS only, without the firewall IP lists or country blocking that pfSense provides.

  • AdGuard Home

    Network-wide ad and tracker blocking in a single binary, with encrypted DNS built in rather than bolted on.

    FreeOpen sourceWindowsmacOSLinuxWebSelf-hosted

    AdGuard Home is an open source single binary with a web interface and encrypted DNS serving, but it does no IP or country blocking at the firewall.

  • OpenWrt adblock

    A DNS-based ad and abuse domain blocking package for OpenWrt routers, covering every device on the network.

    FreeOpen sourceLinuxCommand line

    OpenWrt adblock provides network-wide DNS blocking on OpenWrt routers instead of pfSense firewalls, and is open source with a command-line interface.

  • Adblock Fast

    A lightweight DNS-based ad blocker for OpenWrt routers using dnsmasq, smartdns, Unbound or BIND.

    FreeOpen sourceSelf-hosted

    Adblock Fast is an AGPL-3.0 DNS ad blocker for OpenWrt routers with low memory use and optional LuCI interface, lacking IP blocklists.

  • Diversion

    A DNS-based ad blocker that runs on Asus routers with Asuswrt-Merlin firmware.

    FreeProprietarySelf-hostedCommand line

    Diversion performs router-level DNS ad blocking only on Asus routers with Asuswrt-Merlin firmware, without firewall IP or country blocking.

  • NxFilter

    A self-hosted DNS filter with per-user policies, reports and Active Directory integration.

    FreeProprietarySelf-hosted

    NxFilter is a self-hosted DNS filter with per-user policies, reports and Active Directory integration, aimed at schools and organisations.

Similar software

Related functionality, not necessarily a direct replacement.

Report a wrong fact or a dead link on this listing