How to block 200K ip addresses?

[Bill Moran]

In response to "Aminuddin" <amin.scg at gmail.com>:

> Hi,
> How do you block this large range of ip addresses from different subnet?
> IPFW only allows 65536 rules while this will probably use up a few hundred
> thousands of lines.
> 
> I'm also trying to add this into my proxy configuration file, ss5.conf but
> it doesn't allow me to add this large number.
> 
> IS this the limitation of IPF or FreeBSD? How do I work around this?

Not sure if this is a limitation of ipf, but you should be able to do
what you want with pf and pf tables.  As long as you're using a
relatively recent version of FreeBSD, you'll have pf as an option.

-- 
Bill Moran
http://www.potentialtech.com