Operations grimoire/Firewall

📕📁📜 Old technical information :: content warning

⌛ This Nasqueron Operations Grimoire page hasn't been updated for a long time.

☣ As our infrastructure evolves quickly, there is a good chance this information is outdated or now inaccurate. Be careful and consider update it.

➡️ To assert the information is still up-to-date or not, you can check the history of the relevant role in our Operations repository.

pf

Work in progress. As of 2024-10-21, pf is only deployed to Hervil.

pf is installed on FreeBSD and OpenBSD servers.

IP addresses or ranges to block can be added to the badhost table:

     $ pfctl -t badhosts -T add $IP_TO_BLOCK
     $ pfctl -t badhosts -T show
     $ pfctl -t badhosts -T delete $IP_TO_BLOCK