Best Way To Block Range of Addresses with ipfw2?

Chuck Swiger cswiger at mac.com
Wed Feb 8 15:11:04 PST 2006


Drew Tomlinson wrote:
> I want to deny access to addresses in this range:
> 
> 84.57.113.0 - 84.61.96.255
> 
> What is the best way to specify this range for ipfw2?  There must be a
> better way than listing a whole bunch of individual networks.

deny ip from 84.56.0.0/13 to any

...comes pretty close.  Use finer-grained allow rule before that if you need to
pass stuff in 84.56.0.0/16, for example.

-- 
-Chuck


More information about the freebsd-questions mailing list