Re: Simple firewall question: Blocking a handful of IPs

2006-04-27 Thread RW
On Thursday 27 April 2006 03:10, fbsd wrote:
  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED] Behalf Of H. Wade
  Minter
 ..
  I want all traffic allowed unfettered, except traffic from
  particular
  IPs to be completely blocked coming in.
 
  Can someone show me which ipf rules to use to get that result?

   block in quick on rl0 from x.x.x.x  to any

Unless the syntax is the same, that looks more like pf than ipf.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Simple firewall question: Blocking a handful of IPs

2006-04-27 Thread RW
On Thursday 27 April 2006 17:53, RW wrote:
 On Thursday 27 April 2006 03:10, fbsd wrote:
   -Original Message-
   From: [EMAIL PROTECTED]
   [mailto:[EMAIL PROTECTED] Behalf Of H. Wade
   Minter
 
  ..
 
   I want all traffic allowed unfettered, except traffic from
   particular
   IPs to be completely blocked coming in.
  
   Can someone show me which ipf rules to use to get that result?
 
block in quick on rl0 from x.x.x.x  to any

 Unless the syntax is the same, that looks more like pf than ipf.

Sorry, I see the syntax is the same.
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Simple firewall question: Blocking a handful of IPs

2006-04-27 Thread Giorgos Keramidas
On 2006-04-27 17:53, RW [EMAIL PROTECTED] wrote:
On Thursday 27 April 2006 03:10, fbsd wrote:
H. Wade Minter wrote:
 I want all traffic allowed unfettered, except traffic from
 particular IPs to be completely blocked coming in.

 Can someone show me which ipf rules to use to get that result?

   block in quick on rl0 from x.x.x.x  to any

 Unless the syntax is the same, that looks more like pf than ipf.

The syntax *is* the same, in this case.  The only ipf syntax
feature that ipf users are likely to miss from pf syntax is the
use of rule `groups', but this is not used here.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Simple firewall question: Blocking a handful of IPs

2006-04-26 Thread H. Wade Minter
I'm not extremely comfortable with doing firewall testing remotely on  
production systems, but I need to set up some incoming IP blocks.   
I've got a FreeBSD RELENG_5_4 system with public interface rl0.


I want all traffic allowed unfettered, except traffic from particular  
IPs to be completely blocked coming in.


Can someone show me which ipf rules to use to get that result?

Thanks,
Wade
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Simple firewall question: Blocking a handful of IPs

2006-04-26 Thread fbsd

  block in quick on rl0 from x.x.x.x  to any

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of H. Wade
Minter
Sent: Wednesday, April 26, 2006 8:47 PM
To: [EMAIL PROTECTED]
Subject: Simple firewall question: Blocking a handful of IPs


I'm not extremely comfortable with doing firewall testing remotely
on
production systems, but I need to set up some incoming IP blocks.
I've got a FreeBSD RELENG_5_4 system with public interface rl0.

I want all traffic allowed unfettered, except traffic from
particular
IPs to be completely blocked coming in.

Can someone show me which ipf rules to use to get that result?

Thanks,
Wade
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]