From owner-freebsd-questions@FreeBSD.ORG  Thu Apr 27 02:11:07 2006
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: questions@freebsd.org
Delivered-To: freebsd-questions@FreeBSD.ORG
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 7230816A406
	for <questions@freebsd.org>; Thu, 27 Apr 2006 02:11:07 +0000 (UTC)
	(envelope-from fbsd@a1poweruser.com)
Received: from mta13.adelphia.net (mta13.mail.adelphia.net [68.168.78.44])
	by mx1.FreeBSD.org (Postfix) with ESMTP id F14F543D45
	for <questions@freebsd.org>; Thu, 27 Apr 2006 02:10:57 +0000 (GMT)
	(envelope-from fbsd@a1poweruser.com)
Received: from barbish ([70.39.69.56]) by mta13.adelphia.net
	(InterMail vM.6.01.05.02 201-2131-123-102-20050715) with SMTP
	id <20060427021056.KDIC27153.mta13.adelphia.net@barbish>;
	Wed, 26 Apr 2006 22:10:56 -0400
From: "fbsd" <fbsd@a1poweruser.com>
To: "H. Wade Minter" <minter@lunenburg.org>,
	<questions@freebsd.org>
Date: Wed, 26 Apr 2006 22:10:52 -0400
Message-ID: <MIEPLLIBMLEEABPDBIEGGEKDHFAA.fbsd@a1poweruser.com>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.6604 (9.0.2911.0)
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1478
In-Reply-To: <448EA859-3B8C-4AF5-9946-9CCB26FE5C81@lunenburg.org>
Importance: Normal
Cc: 
Subject: RE: Simple firewall question: Blocking a handful of IPs
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: fbsd@a1poweruser.com
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Apr 2006 02:11:07 -0000


  block in quick on rl0 from x.x.x.x  to any

-----Original Message-----
From: owner-freebsd-questions@freebsd.org
[mailto:owner-freebsd-questions@freebsd.org]On Behalf Of H. Wade
Minter
Sent: Wednesday, April 26, 2006 8:47 PM
To: questions@freebsd.org
Subject: Simple firewall question: Blocking a handful of IPs


I'm not extremely comfortable with doing firewall testing remotely
on
production systems, but I need to set up some incoming IP blocks.
I've got a FreeBSD RELENG_5_4 system with public interface rl0.

I want all traffic allowed unfettered, except traffic from
particular
IPs to be completely blocked coming in.

Can someone show me which ipf rules to use to get that result?

Thanks,
Wade
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"freebsd-questions-unsubscribe@freebsd.org"