cpghost at cordula.ws
Tue Nov 25 16:59:40 PST 2003
> Can I block a certain IP address at the machine or interface level using
> freebsd? (No at the Apache or Sendmail level).
Quick and dirty fix:
# route add 126.96.36.199 127.0.0.1
All ACKs to 188.8.131.52 would not be able to reach their destination,
and no TCP connections could be established this way. Moreoever,
no UDP or ICMP packets would reach the blocked IP address.
You can also block a whole subnet this way.
The real solution is to enable a firewall at the interface
level, or perhaps even add an ACL on your router (if you control
your upstream router).
Cordula's Web. http://www.cordula.ws/
More information about the freebsd-questions