hosts.allow

Jeff With jeff.wirth at gmail.com
Thu Feb 24 01:41:26 GMT 2005


On Wed, 23 Feb 2005 19:20:11 -0500 (EST), kalin mintchev <kalin at el.net> wrote:
> >> Feb 23 17:21:05 bigdaddy named[85641]: client 218.19.160.163#64057:
> no such chances. the machine is not on my local network. on the network
> where this machine is there is no windows machines. and the 218.19.160.163
> is somewhere in china....
> 
> is there any other way to block it? except ipfw rules...
> 

BIND version 9.x (not sure on the exact version) and up supports ACLs.

example named.conf

acl china { 
  218.19.160.163; } ;

options {
   blackhole {china;};
};

- jeff


More information about the freebsd-questions mailing list