Operations grimoire/Firewall

From Nasqueron Agora

< Operations grimoire

Revision as of 00:30, 21 October 2024 by Dereckson (talk | contribs) (→‎Block a specific IP or range)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

pf

Work in progress. As of 2024-10-21, pf is only deployed to Hervil.

pf is installed on FreeBSD and OpenBSD servers.

Block a specific IP or range

IP addresses or ranges to block can be added to the badhost table:

$ pfctl -t badhosts -T add $IP_TO_BLOCK
$ pfctl -t badhosts -T show
$ pfctl -t badhosts -T delete $IP_TO_BLOCK

Retrieved from "https://agora.nasqueron.org/index.php?title=Operations_grimoire/Firewall&oldid=1661"