From owner-freebsd-questions@freebsd.org Mon Nov 6 08:38:42 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id ED02EE56E2F for ; Mon, 6 Nov 2017 08:38:42 +0000 (UTC) (envelope-from rosettas@gmail.com) Received: from mail-wm0-x22f.google.com (mail-wm0-x22f.google.com [IPv6:2a00:1450:400c:c09::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 7DFB165883 for ; Mon, 6 Nov 2017 08:38:42 +0000 (UTC) (envelope-from rosettas@gmail.com) Received: by mail-wm0-x22f.google.com with SMTP id y83so12308154wmc.4 for ; Mon, 06 Nov 2017 00:38:42 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=Ej2a7hOgknOWpzIdzgcBiuwYHUkyma3FXHBAWdnvOHE=; b=J1/8ZC01PTM94bOBsqwe3xf/CjQs1MWXJIzckv458lOViMOSCRq158OQ8tSLP0o+5M I7L9kZUt/EDzch5KTmqL0K1DLh48dqfAdXmSv56sDHY70CRtDEQ2Twl7ADJazr/LyDx0 3iXLKVqgPgHi27vE3hbUJWzbP68iZXE49ae6xdWh/1Fj/t1dPzdKGvUfxuzBGD7V/amP yZFOas3C2tzrEohn3REDxcZqtxVLI9wRbEBhBebSyQuHTZM6oOx7hdDhXwEtJWrW6hT+ 2LVYewEO3QY2o3XszrDRlyLne/mb1sO3oTfplr0l2OOEVyKMp+a+Rggf2qSkJ10qVGLD R3Gg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=Ej2a7hOgknOWpzIdzgcBiuwYHUkyma3FXHBAWdnvOHE=; b=YFfZEQEIK3OkzB9p2pAR+Ja7PuExqjeG4yoBHl5kB+78MMT9h0U9R426XQbGi4iMKk QJberNnprKHm4AidWdC+pSmcjVklWqooG9KwWVuxz4qvXppRxCFoB9DWNEBXmQyfWIxD DeyrOH94HdBiRDPUd0Be1dYNSauqpU3ulMJzapLpL9M65xugM1R51toZwrrPyogzyBNV Lk3YjBMm4QWINZTz7blvN8AYIGLilcUnVtO7ivIaC4+e+7WnUj5+PhtHyUEKv+CcpMpj P8rL9kccIg46X4kxRTI3roJmOJW5O9QwXb7Eixo5d/yuMZOj2HiiyL3JqrvoTAMAhXC9 3jKA== X-Gm-Message-State: AJaThX4i4cSpZ3mdQbYIk2y0w3UrjcmJrQJY1HoEPDe3dcfT6VVjY8Nq e39e1f9njjyMp4xKnNau/KvETjnZZYG1pxi2Deprf2jX X-Google-Smtp-Source: ABhQp+TrfGKviv/CGnx6OAY+LYUCOCp9hFJWfymKaT1vwRDvHAlSrqvUwdP2z2Q0n42wb3Uzzhd2ccbWMlefFXNvD18= X-Received: by 10.28.126.146 with SMTP id z140mr5118403wmc.126.1509957520739; Mon, 06 Nov 2017 00:38:40 -0800 (PST) MIME-Version: 1.0 Received: by 10.28.10.76 with HTTP; Mon, 6 Nov 2017 00:38:40 -0800 (PST) From: Cos Chan Date: Mon, 6 Nov 2017 09:38:40 +0100 Message-ID: Subject: How to setup IPFW working with blacklistd To: freebsd-questions Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Nov 2017 08:38:43 -0000 Hi All I would run IPFW with blacklistd, my FreeBSD is 11.1-RELEASE-p1. my blacklistd is working fine to get sshd failed login attempts. The out put: $ sudo blacklistctl dump -b address/ma:port id nfail last access 1.1.1.1/32:22 3/-1 2017/11/05 01:05:34 2.2.2.2/32:22 3/-1 2017/11/05 13:22:53 but I can't find information how to use the blacklistd database in IPFW from IPFW manpage would anybody explain that to me? -- with kind regards