Block IP

[Cordula's Web]

> > Can I block a certain IP address at the machine or interface level using
> > freebsd? (No at the Apache or Sendmail level).
> >
> > CyberLaert monioting one of my hosts at the rate of 1.2 GB oer day!
> 
> Easiest and quickest is to install the firewall - if it is not already in
> your kernel, simply load it as a dynamic module. In a pinch (and if the
> person causing problem is doing this by accident) you can try something
> like "route add 12.34.56.78/32 127.0.0.1" which will make the tcp
> handshake break. Which may cause the other end to realize somethign is
> amiss. But it does not really stop the traffic.

See ipfw(8).

-- 
Cordula's Web. http://www.cordula.ws/