Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 8 Sep 1998 19:17:34 -0700
From:      "Briang.org" <brian@briang.org>
To:        <freebsd-questions@FreeBSD.ORG>
Subject:   IP Blocking
Message-ID:  <000901bddb98$09eed180$2900a8c0@brian-desktop.thetingroup.com>

next in thread | raw e-mail | index | archive | help
This is a multi-part message in MIME format.

------=_NextPart_000_0006_01BDDB5D.553F5FA0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

What I'm trying to do is block a Domain or a hole Class C segment, this =
is what I'm running

ED0 =3D 24.1.88.xx
ED1 =3D 192.168.0.1
local Lan =3D 192.168.0.2 to 192.168.0.64

/KERNEL
IPDIVERT
IPFIREWALL
IPFIREWALL_VERBOSE
IPFIREWALL_VERBOSE_LIMIT

/etc/rc/local
ipfw -f flush
ipfw add 1000 pass all from 127.0.0.1 to 127.0.0.1
ipfw add divert 6668 all from any to any via ed0
ipfw add 6500 pass all from any to any

I'm trying to block all traffic from 24.0.0.0/24 or which is home.com.
I tryed=20
" ipfw add deny all from 24.0.0.0/24 to 24.1.88.78 via ed0 "
And that didn't work,=20
Can you tell me how to log all incoming traffic to the box ?
I have looked at man ipfw and just dont understand what it's trying
to say about logging.

Thanks Brian

 =20

------=_NextPart_000_0006_01BDDB5D.553F5FA0
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD W3 HTML//EN">
<HTML>
<HEAD>

<META content=3Dtext/html;charset=3Diso-8859-1 =
http-equiv=3DContent-Type>
<META content=3D'"MSHTML 4.72.3110.7"' name=3DGENERATOR>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT color=3D#000000 size=3D2>What I'm trying to do is block a =
Domain or a=20
hole Class C segment, this is what I'm running</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT size=3D2>ED0 =3D 24.1.88.xx</FONT></DIV>
<DIV><FONT size=3D2>ED1 =3D 192.168.0.1</FONT></DIV>
<DIV><FONT size=3D2>local Lan =3D 192.168.0.2 to =
192.168.0.64</FONT></DIV>
<DIV><FONT size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT color=3D#000000 size=3D2>/KERNEL</FONT></DIV>
<DIV><FONT color=3D#000000 size=3D2></FONT><FONT =
size=3D2>IPDIVERT</FONT></DIV>
<DIV><FONT size=3D2>IPFIREWALL</FONT></DIV>
<DIV><FONT size=3D2>IPFIREWALL_VERBOSE</FONT></DIV>
<DIV><FONT size=3D2>IPFIREWALL_VERBOSE_LIMIT</FONT></DIV>
<DIV><FONT size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT size=3D2>/etc/rc/local</FONT></DIV>
<DIV><FONT size=3D2>ipfw -f flush<BR>ipfw add 1000 pass all from =
127.0.0.1 to=20
127.0.0.1<BR>ipfw add divert 6668 all from any to any via ed0<BR>ipfw =
add 6500=20
pass all from any to any</FONT></DIV>
<DIV><FONT size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT color=3D#000000 size=3D2>I'm trying to block all traffic from =
24.0.0.0/24=20
or which is home.com.</FONT></DIV>
<DIV><FONT color=3D#000000 size=3D2></FONT><FONT size=3D2></FONT><FONT =
color=3D#000000=20
size=3D2>I tryed </FONT></DIV>
<DIV><FONT color=3D#000000 size=3D2></FONT><FONT size=3D2>&quot; ipfw =
add deny all=20
from 24.0.0.0/24 to 24.1.88.78 via ed0 &quot;</FONT></DIV>
<DIV><FONT size=3D2>And that didn't work, </FONT></DIV>
<DIV><FONT size=3D2>Can you tell me how to log all incoming traffic to =
the box=20
?</FONT></DIV>
<DIV><FONT size=3D2>I have looked at man ipfw and just dont understand =
what it's=20
trying</FONT></DIV>
<DIV><FONT size=3D2>to say about logging.</FONT></DIV>
<DIV><FONT size=3D2></FONT><FONT color=3D#000000 =
size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT color=3D#000000 size=3D2>Thanks Brian</FONT></DIV>
<DIV><FONT color=3D#000000 size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT color=3D#000000 size=3D2>&nbsp; </FONT></DIV></BODY></HTML>

------=_NextPart_000_0006_01BDDB5D.553F5FA0--


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?000901bddb98$09eed180$2900a8c0>