SSHguard & IPFW
axelbsd at ymail.com
Wed Sep 30 09:08:30 UTC 2015
Thank you Nino for your reply.
Effectively today I can see a line with multiple IP addresses on the same rule number.
About the next version of SSHGuard, you mean SSHGuard (for IPFW) will works the same way than SSHGuard for PF?
> From: nino80 at gmail.com
> Date: Wed, 30 Sep 2015 09:41:55 +0200
> Subject: Re: SSHguard & IPFW
> To: axelbsd at ymail.com
> CC: freebsd-questions at freebsd.org
> On Tue, Sep 29, 2015 at 4:24 PM, Alexandre <axelbsd at ymail.com> wrote:
>>>> About the blocking rules reservation in IPFW (from rule 55000 to
>>>> 55050), anyone experienced yet full use of these rules?
>>>> By default, fifteen addresses can be blocked together. But how SSHGUARD
>>>> works in this case for the newest one (51th)?
>>>> Thank you in advance for your clarifications.
> To answer your second question, IPFW has no problem using the same rule
> number for multiple rules. Thus sshguard is not limited to 50 addresses.
> Also, next version of sshguard won't use IPFW rules, but rather an IPFW
> table to insert IP addresses to be blocked. Thus it will only need a single
> deny rule.
> I'm currently using development version of sshguard which uses IPFW table
> and it works fine for me.
> freebsd-questions at freebsd.org mailing list
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"
More information about the freebsd-questions