From owner-freebsd-questions@freebsd.org Fri Jan 22 22:36:15 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6B7B6A8E50D for ; Fri, 22 Jan 2016 22:36:15 +0000 (UTC) (envelope-from wfdudley@gmail.com) Received: from mail-yk0-x22a.google.com (mail-yk0-x22a.google.com [IPv6:2607:f8b0:4002:c07::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 29F77127D for ; Fri, 22 Jan 2016 22:36:15 +0000 (UTC) (envelope-from wfdudley@gmail.com) Received: by mail-yk0-x22a.google.com with SMTP id s126so78366697ykf.2 for ; Fri, 22 Jan 2016 14:36:15 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-type:content-transfer-encoding; bh=HK6olLavgEUw7hRQ4Bpk20zE2rfA32GZBnutTwO6yCA=; b=sEqRxHfzmHumtC+4mT5GYLquCmd68ysiUoCXViwPtUiqikMsof1cN79QqE6ANGCqO4 AtAq8QUgBKRPw5rBFsipMmNLZATgeSzegdF3vGP5iX0KkMq+aR4OhwDI994QwEnDqJeQ x/0fAnp0oNMF7PWkEmqvMgggghNbLa4/pkwsA/LqSEx+NW+Vrup/Qu50VgU9J3kmfAe/ qlgYHXSjcG2jO5HQm5vNUUaBgszW16M1vB3FoXlwL1LSY11KFytR+ovVZLhRCUSGmbY8 skjnYVzjCXZrR9cRlxHaM1o+wZWEUU0C8FtBKSvZxOLQ+HqonkB4eGfihpcomPSnC5jf +p+A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-type :content-transfer-encoding; bh=HK6olLavgEUw7hRQ4Bpk20zE2rfA32GZBnutTwO6yCA=; b=GhDwSxyT5PH9GnGxaKa6bdfywRzJfckU9MZJqqY+jlAmDxhv7W+aafpTWtfEupk4Ez +FCMYcokA/UUA48TY+79ovt+fNXYsN9abiGS77fMjG0+Ev9DfK9WbBI9VYCIWUAL/cX0 gnXDLYS8gSLJOPv7sGJccPoLrRH0C5NC4UlTffmlRGSP2OI6imIjM/aYVOWHr95510GM dM+8CvYEgG+UXIBFXjrObpHsAV2NRVazzqbQCqQRH7KEnON4h9ZKiFMcYR2Hq3ilNVNg qZAA+8GKhTOx+GC+nNf1UOjPdlIIkCxAw1E3Zb21mxC7mjvdTAvnxH1Wr/Toz3lSNFT1 BZkA== X-Gm-Message-State: AG10YORR7bWgH/gXfmJKQRmLoXcmed8dMiWUnw6fCBGdRwq58MhrtURZewiYQa5/+vFtnQ== X-Received: by 10.13.201.131 with SMTP id l125mr3060393ywd.150.1453502174126; Fri, 22 Jan 2016 14:36:14 -0800 (PST) Received: from [192.168.27.26] (mail.casano.com. [98.109.205.15]) by smtp.googlemail.com with ESMTPSA id i67sm5497060ywf.34.2016.01.22.14.36.13 for (version=TLSv1/SSLv3 cipher=OTHER); Fri, 22 Jan 2016 14:36:13 -0800 (PST) Subject: Re: IPFW deny ip range To: freebsd-questions@freebsd.org References: <56A2A4F5.3030907@cloudzeeland.nl> From: "William F. Dudley Jr." Message-ID: <56A2AEDC.2040204@gmail.com> Date: Fri, 22 Jan 2016 17:36:12 -0500 User-Agent: Mozilla/5.0 (X11; Linux i686; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 In-Reply-To: <56A2A4F5.3030907@cloudzeeland.nl> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Jan 2016 22:36:15 -0000 block in quick on bge0 from 123.0.0.0/8 to any block in quick on bge0 from 123.1.0.0/16 to any etc. replace bge0 with whatever interface your traffic is coming in on. Bill Dudley On 01/22/2016 04:53 PM, JosC wrote: > I have this ip range that I would like to block (example ip): > > 123.xx.xx.xx > 123.1.xx.xx > 123.1.1.xx > > Can someone tell me how I can define best in ipfw.rules? > > Thanks, > Jos Chrispijn > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org"