Kevin D. Kinsey, DaleCo, S.P.
kdk at daleco.biz
Tue Nov 25 22:24:51 PST 2003
Cordula's Web wrote:
>>Can I block a certain IP address at the machine or interface level using
>>freebsd? (No at the Apache or Sendmail level).
>Quick and dirty fix:
># route add 22.214.171.124 127.0.0.1
>All ACKs to 126.96.36.199 would not be able to reach their destination,
>and no TCP connections could be established this way. Moreoever,
>no UDP or ICMP packets would reach the blocked IP address.
>You can also block a whole subnet this way.
That's a wonderful hack!
all: 188.8.131.52 :deny
More information about the freebsd-questions