From owner-freebsd-security@FreeBSD.ORG Sat Nov 20 20:39:46 2004 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id EC88216A4CE for ; Sat, 20 Nov 2004 20:39:46 +0000 (GMT) Received: from mail.pilgerer.org (hamlet.pilgerer.org [217.20.119.252]) by mx1.FreeBSD.org (Postfix) with ESMTP id 243D143D1D for ; Sat, 20 Nov 2004 20:39:46 +0000 (GMT) (envelope-from marc@hamlet.pilgerer.org) Received: from localhost (hamlet.pilgerer.de [217.20.119.252]) by mail.pilgerer.org (8.13.0/8.12.10) with ESMTP id iAKKdidv088237; Sat, 20 Nov 2004 21:39:44 +0100 (CET) (envelope-from marc@hamlet.pilgerer.org) Received: from mail.pilgerer.org ([217.20.119.252]) by localhost (hamlet.pilgerer.org [217.20.119.252]) (amavisd-new, port 10024) with LMTP id 86246-05; Sat, 20 Nov 2004 21:39:43 +0100 (CET) Received: from hamlet.pilgerer.org (marc@hamlet.pilgerer.de [217.20.119.252]) by mail.pilgerer.org (8.13.0/8.12.10) with ESMTP id iAKKdf60088231 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sat, 20 Nov 2004 21:39:41 +0100 (CET) (envelope-from marc@hamlet.pilgerer.org) Received: (from marc@localhost) by hamlet.pilgerer.org (8.13.0/8.12.10/Submit) id iAKKdfmE088230; Sat, 20 Nov 2004 21:39:41 +0100 (CET) (envelope-from marc) Date: Sat, 20 Nov 2004 21:39:41 +0100 From: Marc Sztochay To: Francisco Reyes Message-ID: <20041120203941.GB87868@pilgerer.org> References: <20041120133048.N7533@zoraida.natserv.net> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="VrqPEDrXMn8OVzN4" Content-Disposition: inline In-Reply-To: <20041120133048.N7533@zoraida.natserv.net> X-PGP-Key: http://wwwkeys.pgp.net:11371/pks/lookup?op=get&search=0x3C2EE66A X-PGP-Fingerprint: 0AE1 18CF 01C0 0546 27DC 56F9 5A43 0B24 3C2E E66A X-Disclaimer: Use Outlook Express at your own risk X-Operating-System: FreeBSD 5.2.1-RELEASE-p9 i386 User-Agent: Mutt/1.5.6i X-Scanned-By: milter-sender/0.55.730 (hamlet.pilgerer.org [217.20.119.252]); Sat, 20 Nov 2004 21:39:41 +0100 X-Filter-Status: scanned by Antivir, f-prot and clamd X-Mailman-Approved-At: Sun, 21 Nov 2004 14:41:28 +0000 cc: FreeBSD Security List Subject: Re: Importing into rc.firewal rules X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Nov 2004 20:39:47 -0000 --VrqPEDrXMn8OVzN4 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable You (Francisco Reyes) wrote on Sat, Nov 20, 2004 at 07:32:15PM CET: > I have a grown list of IPs that I am "deny ip from ###.### to any". > Infected machines, hackers, etc.. >=20 > Is there a way to have this list outside of rc.firewall and just read it= =20 > in? hi *, simply add a : for i in `cat denied_badhackers ` ; do ... into your ipfw script. its just shell :) regards, marc --=20 Marc Sztochay - mailto:msztochay@pilgerer.org =20 --VrqPEDrXMn8OVzN4 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (FreeBSD) iD8DBQFBn6uNWkMLJDwu5moRAmMJAJ9hFvcDTMutv/X+QWVdo6tqHjR6AwCgrJqe iOXhnOz193MJ21PYQEHHTmA= =uC7H -----END PGP SIGNATURE----- --VrqPEDrXMn8OVzN4--