Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 11 Oct 2004 11:51:14 +0200
From:      "Pelle Andersson" <pelle@spd.nu>
To:        "'Subhro'" <subhro.kar@gmail.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Adding network & IP to hosts.deny
Message-ID:  <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAArvdSa/sjb0OI1eLKLXuK1sKAAAAQAAAAdhm1lxTTtk6dT6bn56JRwgEAAAAA@spd.nu>
In-Reply-To: <b2807d0404101102327d362ce2@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
 
Thanks for your reply!

Does it matter where in the script I put this/these line/lines?
Must it be before or after any other rule?

Thanks

> The firewall would be definitely a better bet than host.deny.
> If you are using ipfw you can simply add a couple of deny rules
like:
>
> ipfw add 100 deny all from 192.168.100.0/24 to me in
>
> Regards
> S.


On Mon, 11 Oct 2004 08:46:40 +0200, Pelle Andersson <pelle@spd.nu>
wrote:
> 
> Hi!
> 
> I have a lot of login attempts from various networks and IP
addresses 
> on my FBSD 4.10 server. I have read the man pages for hosts.deny but

> do not understand how to add networks and IP addresses to it.
> 
> Let's say I want to block the network address 192.168.100.0 and/or
the 
> IP address 192.168.135.77.
> 
> What I understand is when using hosts.deny, I stopping them totally 
> from using any networking services, right?
> 
> Would it be better to let the built-in firewall (/etc/rc.firewall)
to 
> stopping them? I have the firewall activated and have changed the
port 
> for example SSH to a higher one.
> 
> Could someone please provide me with some examples on either using 
> hosts.deny or the default firewall?
> 
> A big thanks in advance,
> Best Regards Pelle
> 
> _______________________________________________
> freebsd-questions@freebsd.org mailing list 
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
"freebsd-questions-unsubscribe@freebsd.org"
> 


--
Subhro Sankha Kar
School of Information Technology
Block AQ-13/1 Sector V
ZIP 700091
India



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAArvdSa/sjb0OI1eLKLXuK1sKAAAAQAAAAdhm1lxTTtk6dT6bn56JRwgEAAAAA>