Am 07.04.2017 18:38 schrieb Peter N. M. Hansteen:
On 04/07/17 18:00, I love OpenBSD wrote:
I second to more IPv6 related information.
I am curious about blocking port scanning in IPv6 Web. Does pf let me
put a CIDR into the named table based on offending IPv6 address and
64-bit mask? I mean something similar to 'overload <table>' option.
Tables can hold both inet and inet6 items, and you can add them as
single addresses or with masks:
Also tables can be manipulated with bgpd, so keen to see phessler's new
talk on that in Ottawa.
ciao
--
pb