From owner-freebsd-questions  Tue Jul  8 11:06:08 1997
Return-Path: <owner-questions>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id LAA29251
          for questions-outgoing; Tue, 8 Jul 1997 11:06:08 -0700 (PDT)
Received: from socrates.i-pi.com (socrates.i-pi.com [198.49.217.5])
          by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id LAA29246
          for <questions@freebsd.org>; Tue, 8 Jul 1997 11:06:05 -0700 (PDT)
Received: (from ingham@localhost)
	by socrates.i-pi.com (8.8.5/8.8.5) id MAA00964;
	Tue, 8 Jul 1997 12:00:20 -0600 (MDT)
Message-ID: <19970708120020.20339@socrates.i-pi.com>
Date: Tue, 8 Jul 1997 12:00:20 -0600
From: Kenneth Ingham <ingham@i-pi.com>
To: "Alejandro I. Parada Aguilera" <aparada@vianet.com.mx>
Cc: questions@freebsd.org
Subject: Re: Urgent... !!!
References: <16415467109484@vianet.com.mx>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 0.74
In-Reply-To: <16415467109484@vianet.com.mx>; from Alejandro I. Parada Aguilera on Tue, Jul 08, 1997 at 10:41:43AM -0600
Sender: owner-questions@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

On Tue, Jul 08, 1997 at 10:41:43AM -0600, Alejandro I. Parada Aguilera wrote:
> can i refuse a IP address in my server?

Yes.

First, add a line like:

options         IPFIREWALL              #firewall

to your kernel config file.  Config and rebuild your kernel.

In /etc/rc.conf or /etc/sysconfig, turn on the firewall option.

Check out the /etc/rc.firewall file for some examples of ipfw use.  Note
that turning on the firewall option in /etc/rc.conf or sysconfig will
cause this file to be run at boot time.

Also note that if you have firewalling turned on, the default is to not
allow anything.

Kenneth