How to setup IPFW working with blacklistd

[Michael Ross]

Am .11.2017, 09:38 Uhr, schrieb Cos Chan <rosettas at gmail.com>:

> Hi All
>
> I would run IPFW with blacklistd, my FreeBSD is 11.1-RELEASE-p1.
>
> my blacklistd is working fine to get sshd failed login attempts.
> The out put:
>
> $ sudo blacklistctl dump -b
>         address/ma:port id      nfail   last access
>  1.1.1.1/32:22           3/-1    2017/11/05 01:05:34
>  2.2.2.2/32:22           3/-1    2017/11/05 13:22:53
>
> but I can't find information how to use the blacklistd database in IPFW
> from IPFW manpage
>
> would anybody explain that to me?
>

Have a look at this:

https://people.freebsd.org/~lidl/blacklistd.html

	blacklistd_enable="YES"
	blacklistd_flags="-r"
	sshd_flags="-o UseBlacklist=yes"


Never tried it myself.

Regards,

Michael