From owner-freebsd-questions@FreeBSD.ORG Mon Oct 11 09:32:17 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 793BD16A4CE for ; Mon, 11 Oct 2004 09:32:17 +0000 (GMT) Received: from mproxy.gmail.com (rproxy.gmail.com [64.233.170.203]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2986943D54 for ; Mon, 11 Oct 2004 09:32:17 +0000 (GMT) (envelope-from subhro.kar@gmail.com) Received: by mproxy.gmail.com with SMTP id 80so127360rnk for ; Mon, 11 Oct 2004 02:32:13 -0700 (PDT) Received: by 10.38.179.57 with SMTP id b57mr1145817rnf; Mon, 11 Oct 2004 02:32:13 -0700 (PDT) Received: by 10.38.206.40 with HTTP; Mon, 11 Oct 2004 02:32:13 -0700 (PDT) Message-ID: Date: Mon, 11 Oct 2004 15:02:13 +0530 From: Subhro To: pelle@spd.nu In-Reply-To: Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit References: cc: freebsd-questions@freebsd.org Subject: Re: Adding network & IP to hosts.deny X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: Subhro List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Oct 2004 09:32:17 -0000 The firewall would be definitely a better bet than host.deny. If you are using ipfw you can simply add a couple of deny rules like: ipfw add 100 deny all from 192.168.100.0/24 to me in Regards S. On Mon, 11 Oct 2004 08:46:40 +0200, Pelle Andersson wrote: > > Hi! > > I have a lot of login attempts from various networks and IP addresses > on my FBSD 4.10 server. I have read the man pages for hosts.deny but > do not understand how to add networks and IP addresses to it. > > Let's say I want to block the network address 192.168.100.0 and/or > the IP address 192.168.135.77. > > What I understand is when using hosts.deny, I stopping them totally > from using any networking services, right? > > Would it be better to let the built-in firewall (/etc/rc.firewall) > to stopping them? I have the firewall activated and have changed > the port for example SSH to a higher one. > > Could someone please provide me with some examples on either using > hosts.deny or the default firewall? > > A big thanks in advance, > Best Regards Pelle > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" > -- Subhro Sankha Kar School of Information Technology Block AQ-13/1 Sector V ZIP 700091 India