Hi,

Is there an existing library for pf(4) which includes
the same features like pfctl? Or at least add IP addresses
to a specific block table?

Want to build a some sort of application level IDS/IPS
for my homepage.

The concept (my goal):
- Write a daemon which listen on a specific port on
localhost for incoming commands to block malicious IP
addresses with pf (Add these IP addresses to a block
table).
- Add functionality in the PHP code from my page to
interact via the specific port with the daemon to
block these malicious IP addresses on bad requests
as example.

These steps are needed, because I cannot invoke
pfctl with PHP on my current setup (chroot).

Or any other ideas, how to solve this?

Kind regards,

J. K.

Reply via email to