From owner-freebsd-questions@FreeBSD.ORG  Sun Jun 11 13:30:25 2006
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: questions@freebsd.org
Delivered-To: freebsd-questions@FreeBSD.ORG
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id B218C16A49A
	for <questions@freebsd.org>; Sun, 11 Jun 2006 13:30:25 +0000 (UTC)
	(envelope-from wmoran@collaborativefusion.com)
Received: from mx00.pub.collaborativefusion.com
	(mx00.pub.collaborativefusion.com [206.210.89.199])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 10E1D43D46
	for <questions@freebsd.org>; Sun, 11 Jun 2006 13:30:24 +0000 (GMT)
	(envelope-from wmoran@collaborativefusion.com)
Received: from localhost (monrovll-cuda1-24-53-251-44.pittpa.adelphia.net
	[24.53.251.44])
	(AUTH: LOGIN wmoran, TLS: TLSv1/SSLv3,256bits,AES256-SHA)
	by wingspan with esmtp; Sun, 11 Jun 2006 09:30:23 -0400
	id 00056407.448C1AEF.0000B36D
Date: Sun, 11 Jun 2006 09:30:22 -0400
From: Bill Moran <wmoran@collaborativefusion.com>
To: "Dan Mahoney, System Admin" <danm@prime.gushi.org>
Message-Id: <20060611093022.3169c8b3.wmoran@collaborativefusion.com>
In-Reply-To: <20060611083416.A86148@prime.gushi.org>
References: <20060611083416.A86148@prime.gushi.org>
Organization: Collaborative Fusion
X-Mailer: Sylpheed version 1.0.6 (GTK+ 1.2.10; i386-portbld-freebsd6.1)
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Cc: questions@freebsd.org
Subject: Re: Deny large number of IPs via ipfw
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 11 Jun 2006 13:30:25 -0000

"Dan Mahoney, System Admin" <danm@prime.gushi.org> wrote:

> Hey all,
> 
> I've got a file that I just synced from a major RBL, and I'd like to just 
> use it to globally deny access to my system.  Is there an easy way to do 
> this within ipfw -- the file is about 3 *million* lines, and is from 
> cbl.abuseat.org.

You're probably better off using pf so that you can use a table.

-- 
Bill Moran

You will give me the Ring freely?  In place of the Dark Lord you will set
up a Queen.  And I shall not be dark, but beautiful and terrible as the
Morning and the Night!  Fair as the Sea and the Sun and the Snow upon the
Mountain!  Dreadful as the Storm and the Lightning!  Stronger than the
foundations of the earth.  All shall love me and despair!

        Galadriel