Operations grimoire/Firewall
From Nasqueron Agora
pf
Work in progress. As of 2024-10-21, pf is only deployed to Hervil.
pf is installed on FreeBSD and OpenBSD servers.
Block a specific IP or range
IP addresses or ranges to block can be added to the badhost table:
$ pfctl -t badhosts -T add $IP_TO_BLOCK
$ pfctl -t badhosts -T show
$ pfctl -t badhosts -T delete $IP_TO_BLOCK
