SSHguard & IPFW

Alexandre axelbsd at
Wed Sep 30 09:08:30 UTC 2015

Thank you Nino for your reply.
Effectively today I can see a line with multiple IP addresses on the same rule number. 

About the next version of SSHGuard, you mean SSHGuard (for IPFW) will works the same way than SSHGuard for PF?


> From: nino80 at
> Date: Wed, 30 Sep 2015 09:41:55 +0200
> Subject: Re: SSHguard & IPFW
> To: axelbsd at
> CC: freebsd-questions at
> On Tue, Sep 29, 2015 at 4:24 PM, Alexandre <axelbsd at> wrote:
>>>> About the blocking rules reservation in IPFW (from rule 55000 to
>>>> 55050), anyone experienced yet full use of these rules?
>>>> By default, fifteen addresses can be blocked together. But how SSHGUARD
>>>> works in this case for the newest one (51th)?
>>>> Thank you in advance for your clarifications.
>>>> Alexandre
> To answer your second question, IPFW has no problem using the same rule
> number for multiple rules. Thus sshguard is not limited to 50 addresses.
> Also, next version of sshguard won't use IPFW rules, but rather an IPFW
> table to insert IP addresses to be blocked. Thus it will only need a single
> deny rule.
> I'm currently using development version of sshguard which uses IPFW table
> and it works fine for me.
> Regards,
> --
> Nino
> _______________________________________________
> freebsd-questions at mailing list
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at"

More information about the freebsd-questions mailing list