Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 27 Oct 2014 17:30:57 +0100
From:      Cristiano Deana <cristiano.deana@gmail.com>
To:        Gary Palmer <gpalmer@freebsd.org>
Cc:        "freebsd-pf@freebsd.org" <freebsd-pf@freebsd.org>
Subject:   Re: How to block IP range
Message-ID:  <CAO82ECEWOYTFSqHn9q1BzKBazvJgm_9atbh-EXfVSQamN4Pi1g@mail.gmail.com>
In-Reply-To: <20141027162433.GB6851@in-addr.com>
References:  <CBA35483CE5B4D4B804BF128A77A61650E9A16A7@HIKAWSEXMB02.ad.harman.com> <20141027162433.GB6851@in-addr.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Oct 27, 2014 at 5:24 PM, Gary Palmer <gpalmer@freebsd.org> wrote:

Hi

>> For example, I need to block only 100 IPs in the range: 10.0.0.1-10.0.0.100

> tables?
>
> you can do things like
>
> table <blocked_hosts> persist file "/etc/pf/blocked_hosts.table"
> block in quick log on $ext_if_ipv4 from <blocked_hosts> to any

I'm adding the fast way to build the file:

sh -c 'for ip in `jot 100 1 100`; do echo 10.0.0.$ip >>
/etc/pf/blocked_hosts.table; done'


-- 
Cris, member of G.U.F.I
Italian FreeBSD User Group
http://www.gufi.org/



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAO82ECEWOYTFSqHn9q1BzKBazvJgm_9atbh-EXfVSQamN4Pi1g>