Date: Mon, 27 Oct 2014 17:30:57 +0100 From: Cristiano Deana <cristiano.deana@gmail.com> To: Gary Palmer <gpalmer@freebsd.org> Cc: "freebsd-pf@freebsd.org" <freebsd-pf@freebsd.org> Subject: Re: How to block IP range Message-ID: <CAO82ECEWOYTFSqHn9q1BzKBazvJgm_9atbh-EXfVSQamN4Pi1g@mail.gmail.com> In-Reply-To: <20141027162433.GB6851@in-addr.com> References: <CBA35483CE5B4D4B804BF128A77A61650E9A16A7@HIKAWSEXMB02.ad.harman.com> <20141027162433.GB6851@in-addr.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Oct 27, 2014 at 5:24 PM, Gary Palmer <gpalmer@freebsd.org> wrote: Hi >> For example, I need to block only 100 IPs in the range: 10.0.0.1-10.0.0.100 > tables? > > you can do things like > > table <blocked_hosts> persist file "/etc/pf/blocked_hosts.table" > block in quick log on $ext_if_ipv4 from <blocked_hosts> to any I'm adding the fast way to build the file: sh -c 'for ip in `jot 100 1 100`; do echo 10.0.0.$ip >> /etc/pf/blocked_hosts.table; done' -- Cris, member of G.U.F.I Italian FreeBSD User Group http://www.gufi.org/
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAO82ECEWOYTFSqHn9q1BzKBazvJgm_9atbh-EXfVSQamN4Pi1g>