Date: Sat, 25 Aug 2007 12:56:57 -0400 From: Bill Moran <wmoran@potentialtech.com> To: amin.scg@gmail.com Cc: freebsd-questions@freebsd.org Subject: Re: How to block 200K ip addresses? Message-ID: <20070825125657.d7b18741.wmoran@potentialtech.com> In-Reply-To: <46d05dcf.0abd720a.60a8.fffff7d0@mx.google.com> References: <20070825120018.9D41816A49E@hub.freebsd.org> <46d05dcf.0abd720a.60a8.fffff7d0@mx.google.com>
next in thread | previous in thread | raw e-mail | index | archive | help
In response to "Aminuddin" <amin.scg@gmail.com>: > Hi, > How do you block this large range of ip addresses from different subnet? > IPFW only allows 65536 rules while this will probably use up a few hundred > thousands of lines. > > I'm also trying to add this into my proxy configuration file, ss5.conf but > it doesn't allow me to add this large number. > > IS this the limitation of IPF or FreeBSD? How do I work around this? Not sure if this is a limitation of ipf, but you should be able to do what you want with pf and pf tables. As long as you're using a relatively recent version of FreeBSD, you'll have pf as an option. -- Bill Moran http://www.potentialtech.com
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070825125657.d7b18741.wmoran>