Am Sonntag, 17. Oktober 2004 01:49 schrieb Joe:
> It's not so much that I'm concerned about the attacks as I am about why
> traffic is getting through that shouldn't be. After I added an IP to my
> block list, some packets still got through (although most do not).

 do a test with the following lines within pf.conf:

table <bad_hosts>  persist file "/etc/bad_hosts"
(every ip address goes into 1 line )
..
block in log quick on em0 proto tcp from <bad_hosts> to any
(and 2 more lines blocking)

let's us know what still comes through (log file excerpt)
regards
i.t

Reply via email to