How to block IP range

Cristiano Deana cristiano.deana at gmail.com
Mon Oct 27 16:30:59 UTC 2014


On Mon, Oct 27, 2014 at 5:24 PM, Gary Palmer <gpalmer at freebsd.org> wrote:

Hi

>> For example, I need to block only 100 IPs in the range: 10.0.0.1-10.0.0.100

> tables?
>
> you can do things like
>
> table <blocked_hosts> persist file "/etc/pf/blocked_hosts.table"
> block in quick log on $ext_if_ipv4 from <blocked_hosts> to any

I'm adding the fast way to build the file:

sh -c 'for ip in `jot 100 1 100`; do echo 10.0.0.$ip >>
/etc/pf/blocked_hosts.table; done'


-- 
Cris, member of G.U.F.I
Italian FreeBSD User Group
http://www.gufi.org/


More information about the freebsd-pf mailing list