From nobody Fri Jun 7 17:54:29 2024 X-Original-To: freebsd-questions@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4VwpkB5RFSz5Ly14 for ; Fri, 07 Jun 2024 17:54:42 +0000 (UTC) (envelope-from pprocacci@gmail.com) Received: from mail-ed1-x535.google.com (mail-ed1-x535.google.com [IPv6:2a00:1450:4864:20::535]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "WR4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4VwpkB0bF3z53ds for ; Fri, 7 Jun 2024 17:54:42 +0000 (UTC) (envelope-from pprocacci@gmail.com) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20230601 header.b=UT7YYunN; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of pprocacci@gmail.com designates 2a00:1450:4864:20::535 as permitted sender) smtp.mailfrom=pprocacci@gmail.com Received: by mail-ed1-x535.google.com with SMTP id 4fb4d7f45d1cf-57a31d63b6bso3430668a12.0 for ; Fri, 07 Jun 2024 10:54:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1717782880; x=1718387680; darn=freebsd.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=Jo145R5ld1UGDgWDkg0e33hjHi3ZPIvCld74qXKBMq4=; b=UT7YYunNBkdq9uk7I8mtj7HwYaTOqR3zMobHLBfhvvOcv4AmpEe0VDd3PplPg6xgVi eqdTqxseIOpV8XLKdaneFgaTOmd6TSFtUYLFA7SLpZ6CEdIIqF4OlJqgXKjO5OfnEfE1 05Da3QMia+zlGIG+XieZNU/onyhX8wNpMSLaSrryvs4ZwNwB8YNvTFvu0xMR4AJr7o3O LKFBoKChGk0gxhJIwU6rII2JjuwxLMbWHOZV/yMADlMLVMa6D1upU/N20NTQD4xbvHWP mlXF6yLAH1YDdNjgC5t7gzQj3URS5kCyAnBZFDeWpNwBBy7F7q8qZ4y8pqoEyZxbBQns bytg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1717782880; x=1718387680; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=Jo145R5ld1UGDgWDkg0e33hjHi3ZPIvCld74qXKBMq4=; b=R+l10kdLHEj/ouboDge6zH4AHZh6J/484M43ULBF19zDsr6LoPfgPefKdEMTmJCf3m DAtslTQZWM326EYhV+kZwdZX7XiGaD9rGdjzYDcXGqJlrcqV4DvbNT535we7SQbzmbwH cm3X6dRMVUQkMGe6bMNwuiNU3SXd4aMJMWJZr+65Z9HeU7zZ5ZSoiwYQ66jLHeHGZzzz 1mDTOFn+gCtNkkpxmv0v7b5GHXIzMYFKj0rZkya/8OyNYwNk8f5sRASRQ07jZq+tOe2H CY8T0I4aM6fgIftF0/y/L7VLKDe9HccS+H0iIVoKgIItaih4yUXmzgx0QBcdoxQz9ym+ QE7Q== X-Gm-Message-State: AOJu0YzBBGB84INBehaS/3orzUuBccIsSzkj1hA+rRXNTlZaGL6UV1wD FWOHD/CXKoxFDIVMoe8D9TrS2j0FRUeXqdE35J70cc9tB4/bShDAOd7q5mdbZuUyouDGoJ7xaUW /t7rXVJQNY5LW5Ebv720+pO1WIoEtdQg= X-Google-Smtp-Source: AGHT+IGuALtySLm8jW87pCdGXTu1LN9YSOVVyZJY+7N5pErskyY+pGSaM1gYealk/xs1azz1yTj0RKw/c7Cp2oPHgzw= X-Received: by 2002:a50:9b57:0:b0:57a:2780:e679 with SMTP id 4fb4d7f45d1cf-57c50901c74mr1941171a12.16.1717782880085; Fri, 07 Jun 2024 10:54:40 -0700 (PDT) List-Id: User questions List-Archive: https://lists.freebsd.org/archives/freebsd-questions List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-questions@freebsd.org Sender: owner-freebsd-questions@FreeBSD.org MIME-Version: 1.0 References: <2207a201-691f-43c5-b76a-565af11ab9f8@cloudzeeland.nl> In-Reply-To: From: Paul Procacci Date: Fri, 7 Jun 2024 13:54:29 -0400 Message-ID: Subject: Re: IPFW blocking ip ranges To: Jos Chrispijn Cc: FreeBSD Mailing List Content-Type: multipart/alternative; boundary="0000000000005e70db061a507e00" X-Spamd-Bar: - X-Spamd-Result: default: False [-2.00 / 15.00]; HTTP_TO_IP(1.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; URI_COUNT_ODD(1.00)[3]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_SHORT(-1.00)[-1.000]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; R_SPF_ALLOW(-0.20)[+ip6:2a00:1450:4000::/36]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20230601]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; FREEMAIL_ENVFROM(0.00)[gmail.com]; RCVD_TLS_LAST(0.00)[]; FREEMAIL_FROM(0.00)[gmail.com]; TO_DN_ALL(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; RCPT_COUNT_TWO(0.00)[2]; ARC_NA(0.00)[]; FROM_HAS_DN(0.00)[]; MISSING_XM_UA(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; TO_MATCH_ENVRCPT_SOME(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; MID_RHS_MATCH_FROMTLD(0.00)[]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US]; MLMMJ_DEST(0.00)[freebsd-questions@freebsd.org]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim]; RCVD_COUNT_ONE(0.00)[1]; RCVD_IN_DNSWL_NONE(0.00)[2a00:1450:4864:20::535:from] X-Rspamd-Queue-Id: 4VwpkB0bF3z53ds --0000000000005e70db061a507e00 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Fri, Jun 7, 2024 at 1:53=E2=80=AFPM Paul Procacci = wrote: > > > On Fri, Jun 7, 2024 at 1:41=E2=80=AFPM Jos Chrispijn wrote: > >> Can you tell me how to block in ipfw a certain ip range in one line, lik= e >> 1.184.192.0 - 1.184.255.255 >> Thanks. >> > > ipfw add deny all from 1.184.0.0/18 to any > > Replace accordingly. > > > ~Paul > > -- > __________________ > > :(){ :|:& };: > Ack!!! abort abort! ipfw add deny all from 1.184.192.0/18 to any There ya go. ~Paul --=20 __________________ :(){ :|:& };: --0000000000005e70db061a507e00 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


On Fri, Jun 7, 2024 at 1:53= =E2=80=AFPM Paul Procacci <pproca= cci@gmail.com> wrote:


On Fri, Jun 7,= 2024 at 1:41=E2=80=AFPM Jos Chrispijn <josc@cloudzeeland.nl> wrote:
=20 =20 =20
Can you tell me how to block in ipfw = a certain ip range in one line, like 1.184.192.0 - 1.184.255.255
Thanks.

ipfw add <rulenum> deny all from 1.184.0.0/18 to any

<= /div>
Replace <rulenum> accordingly.


~Paul

--
__________________
:(){ :|:& };:

Ack!!!=C2=A0 abort abort!
ipfw add <rulenum> deny all from 1.184.192.0/18 to any

There ya go.

~Paul
--
__________________

:(){ :|:& };:
--0000000000005e70db061a507e00--