Onpening and Closing ports

Andy Greenwood greenwood.andy at gmail.com
Tue Feb 13 14:00:07 UTC 2007


On 2/13/07, Zbigniew Szalbot <zbyszek at szalbot.homedns.org> wrote:
> Hello,
>
> Peter N. M. Hansteen wrote:
> > You can head them off rather easily with a short PF rule set, see
> > eg http://home.nuug.no/~peter/pf/en/bruteforce.html.
> >
> > They can actually be fun to watch :)
>
> It was funny for me because I set the max con rule to 10 and then logged
> in 10 times to see if that would work. Of course that did (silly me!) and
> as a result I blocked myself the access to the machine. I logged in from
> another IP and commented out the pf.conf file entries for the bruteforce
> but wonder how to empty the table (so that it does not contain my ip) and
> enable the bruteforce defence again.

man pfctl. Specifically the -T switch.

>
> Thank you very much!
>
> --
> Zbigniew Szalbot
>
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"
>


-- 
-- 
I'm nerdy in the extreme and whiter than sour cream


More information about the freebsd-questions mailing list