Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 26 Nov 2003 10:44:22 +0100 (CET)
From:      "Cordula's Web" <cpghost@cordula.ws>
To:        dirkx@webweaving.org
Cc:        grant@thenetnow.com
Subject:   Re: Block IP
Message-ID:  <200311260944.hAQ9iH93052579@fw.farid-hajji.net>
In-Reply-To: <20031125232021.T66019@skutsje.san.webweaving.org> (message from Dirk-Willem van Gulik on Tue, 25 Nov 2003 23:23:11 -0800 (PST))
References:  <00c001c3b3a9$9d7fa8e0$6401a8c0@grant> <20031125232021.T66019@skutsje.san.webweaving.org>

next in thread | previous in thread | raw e-mail | index | archive | help
> > Can I block a certain IP address at the machine or interface level using
> > freebsd? (No at the Apache or Sendmail level).
> >
> > CyberLaert monioting one of my hosts at the rate of 1.2 GB oer day!
> 
> Easiest and quickest is to install the firewall - if it is not already in
> your kernel, simply load it as a dynamic module. In a pinch (and if the
> person causing problem is doing this by accident) you can try something
> like "route add 12.34.56.78/32 127.0.0.1" which will make the tcp
> handshake break. Which may cause the other end to realize somethign is
> amiss. But it does not really stop the traffic.

See ipfw(8).

-- 
Cordula's Web. http://www.cordula.ws/



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200311260944.hAQ9iH93052579>