Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 27 Oct 2014 16:11:33 +0000
From:      "Spenst, Aleksej" <Aleksej.Spenst@harman.com>
To:        "freebsd-pf@freebsd.org" <freebsd-pf@freebsd.org>
Subject:   How to block IP range
Message-ID:  <CBA35483CE5B4D4B804BF128A77A61650E9A16A7@HIKAWSEXMB02.ad.harman.com>

next in thread | raw e-mail | index | archive | help
Hi All,

Is there any syntax to block a certain IP range?
For example, I need to block only 100 IPs in the range: 10.0.0.1-10.0.0.100
I can't use the netmask like "block on eth0 from 10.0.0/24" since this will=
 block 256 addresses.
I don't want also to write all IPs separated by comma like "block on eth0 f=
rom {10.0.0.1,10.0.0.2,.....}" since this will generate 100 separate rules =
(and this is also a very long rule).
Are there any other ways?

Thank you!
Aleksej.






Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CBA35483CE5B4D4B804BF128A77A61650E9A16A7>