Operations grimoire/Firewall: Difference between revisions
From Nasqueron Agora
(Very basic pf) |
(No difference)
|
Revision as of 00:30, 21 October 2024
pf
Work in progress. As of 2024-10-21, pf is only deployed to Hervil.
pf is installed on FreeBSD and OpenBSD servers.
Block a specific IP or range
IP addresses or ranges to block can be added to the badhost table:
$ pfctl -t badhosts -T add $IP_TO_BLOCK
$ pfctl -t badhosts -T show
$ pfctl -t badhosts -T delete $IP_TO_BLOCK
