Re: How to block 200K ip addresses?

2007-08-27 Thread Dan Nelson
In the last episode (Aug 27), Aminuddin said: > Will give this a try. Since my server is a remote server that I can > accessed only by ssh, what are other rules do I need to add in? I > don't want to have a situation where I will lock myself out. The safest method is to have a serial console confi

Re: How to block 200K ip addresses?

2007-08-27 Thread Andy Greenwood
n the rules and allow all that are not in the rules? Thanks -Original Message- From: Dan Nelson [mailto:[EMAIL PROTECTED] Sent: Sunday, August 26, 2007 2:15 PM To: Aminuddin Cc: freebsd-questions@freebsd.org Subject: Re: How to block 200K ip addresses? In the last episode (Aug 26), Amin

RE: How to block 200K ip addresses?

2007-08-26 Thread Aminuddin
w all that are not in the rules? Thanks -Original Message- From: Dan Nelson [mailto:[EMAIL PROTECTED] Sent: Sunday, August 26, 2007 2:15 PM To: Aminuddin Cc: freebsd-questions@freebsd.org Subject: Re: How to block 200K ip addresses? In the last episode (Aug 26), Aminuddin said: > F

Re: How to block 200K ip addresses?

2007-08-26 Thread B H
Dan Nelson: This was a quick hack, so I'm just adding the first IP in each line, not the whole netblock (I didn't want to write a range->netmask converter). No need to do that, there is ipcalc in the ports. http://jodies.de/ipcalc ___ freebsd-ques

Re: How to block 200K ip addresses?

2007-08-25 Thread Kevin Downey
On 8/25/07, CyberLeo Kitsana <[EMAIL PROTECTED]> wrote: > Kevin Downey wrote: > > I would use the pf firewall, it has an option to file tables from a file > > like: > > > > table persist file "/root/evil.txt" > > > > [EMAIL PROTECTED] /root% wc -l evil.txt > > 178438 evil.txt > > > > so its not

Re: How to block 200K ip addresses?

2007-08-25 Thread CyberLeo Kitsana
Kevin Downey wrote: > I would use the pf firewall, it has an option to file tables from a file like: > > table persist file "/root/evil.txt" > > [EMAIL PROTECTED] /root% wc -l evil.txt > 178438 evil.txt > > so its not 300k lines but it takes seconds to load. I attempted something similar wit

Re: How to block 200K ip addresses?

2007-08-25 Thread Dan Nelson
In the last episode (Aug 26), Aminuddin said: > From: Dan Nelson [mailto:[EMAIL PROTECTED] > > In the last episode (Aug 26), Aminuddin said: > > > From: Dan Nelson > > > > In the last episode (Aug 26), Aminuddin said: > > > > > How do you block this large range of ip addresses from > > > > > diff

Re: How to block 200K ip addresses?

2007-08-25 Thread Kevin Downey
] > Sent: Sunday, August 26, 2007 9:37 AM > To: Aminuddin > Cc: freebsd-questions@freebsd.org > Subject: Re: How to block 200K ip addresses? > > In the last episode (Aug 26), Aminuddin said: > > From: Dan Nelson > > > In the last episode (Aug 26), Aminuddin said: &g

RE: How to block 200K ip addresses?

2007-08-25 Thread Aminuddin
Subject: Re: How to block 200K ip addresses? In the last episode (Aug 26), Aminuddin said: > From: Dan Nelson > > In the last episode (Aug 26), Aminuddin said: > > > How do you block this large range of ip addresses from different > > > subnet? IPFW only allows 65536 rul

Re: How to block 200K ip addresses?

2007-08-25 Thread Dan Nelson
In the last episode (Aug 26), Aminuddin said: > From: Dan Nelson > > In the last episode (Aug 26), Aminuddin said: > > > How do you block this large range of ip addresses from different > > > subnet? IPFW only allows 65536 rules while this will probably use > > > up a few hundred thousands of line

RE: How to block 200K ip addresses?

2007-08-25 Thread Aminuddin
the above rules ip range as well as block my snmpd services? -Original Message- From: Dan Nelson [mailto:[EMAIL PROTECTED] Sent: Sunday, August 26, 2007 5:14 AM To: Aminuddin Cc: freebsd-questions@freebsd.org Subject: Re: How to block 200K ip addresses? In the last episode (Aug 26

Re: How to block 200K ip addresses?

2007-08-25 Thread Dan Nelson
In the last episode (Aug 26), Aminuddin said: > How do you block this large range of ip addresses from different > subnet? IPFW only allows 65536 rules while this will probably use up > a few hundred thousands of lines. > > I'm also trying to add this into my proxy configuration file, ss5.conf but

Re: How to block 200K ip addresses?

2007-08-25 Thread Bill Moran
In response to "Aminuddin" <[EMAIL PROTECTED]>: > Hi, > How do you block this large range of ip addresses from different subnet? > IPFW only allows 65536 rules while this will probably use up a few hundred > thousands of lines. > > I'm also trying to add this into my proxy configuration file, ss5

RE: How to block 200K ip addresses?

2007-08-25 Thread Aminuddin
Hi, How do you block this large range of ip addresses from different subnet? IPFW only allows 65536 rules while this will probably use up a few hundred thousands of lines. I'm also trying to add this into my proxy configuration file, ss5.conf but it doesn't allow me to add this large number. IS t