From owner-freebsd-questions@freebsd.org Sat Jan 23 06:33:49 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 986DBA8EC74 for ; Sat, 23 Jan 2016 06:33:49 +0000 (UTC) (envelope-from shahinhasanov@hotmail.com) Received: from DUB004-OMC2S10.hotmail.com (dub004-omc2s10.hotmail.com [157.55.1.149]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (Client CN "*.outlook.com", Issuer "MSIT Machine Auth CA 2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 254401AE3 for ; Sat, 23 Jan 2016 06:33:48 +0000 (UTC) (envelope-from shahinhasanov@hotmail.com) Received: from DUB127-W17 ([157.55.1.137]) by DUB004-OMC2S10.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23008); Fri, 22 Jan 2016 22:32:39 -0800 X-TMN: [wvE8HkNW0bzxaX9Xk5div5qLSTLL5RW6] X-Originating-Email: [shahinhasanov@hotmail.com] Message-ID: From: Shahin Hasanov To: "bsduser@cloudzeeland.nl" , FREEBSD_QUESTION Subject: RE: UPdate: IPFW deny ip range Date: Sat, 23 Jan 2016 10:32:39 +0400 Importance: Normal In-Reply-To: References: <56A2A4F5.3030907@cloudzeeland.nl>, MIME-Version: 1.0 X-OriginalArrivalTime: 23 Jan 2016 06:32:39.0584 (UTC) FILETIME=[DB31FA00:01D155A7] Content-Type: text/plain; charset="windows-1251" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.20 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 23 Jan 2016 06:33:49 -0000 =20 From: shahinhasanov@hotmail.com To: bsduser@cloudzeeland.nl=3B freebsd-questions@freebsd.org Subject: RE: IPFW deny ip range Date: Sat=2C 23 Jan 2016 10:29:27 +0400 =0A= =0A= =0A= Hi=2C you have two options: 1) Use table:=20 ipfw table 1 add 123.xx.xx.xx ipfw table 1 add 123.1.xx.xx ipfw table 1 add 123.1.1.xx if you want to block in ipfw add deny ip from table\(1\) to any in via bce= 0 for example: ipfw 00050 add deny ip from table\(1\) to any in via bce0 or out ipfw add deny ip from table\(1\) to = any out via bce0 2) listed ip in rule ipfw add deny ip from 123.xx.xx.xx=2C123.1.xx.xx=2C123= .1.1.xx to any in via bce0 =20 > To: freebsd-questions@FreeBSD.org > From: bsduser@cloudzeeland.nl > Subject: IPFW deny ip range > Date: Fri=2C 22 Jan 2016 22:53:57 +0100 >=20 > I have this ip range that I would like to block (example ip): >=20 > 123.xx.xx.xx > 123.1.xx.xx > 123.1.1.xx >=20 > Can someone tell me how I can define best in ipfw.rules? >=20 > Thanks=2C > Jos Chrispijn > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe=2C send any mail to "freebsd-questions-unsubscribe@freebsd= .org" =