Re: Convince me, please!
Well sorry if I'm getting annoying but I think you face the Unix world in the wrong manner. Well you expect to find something you are used to, or something like MS Win you only know. I advise that you should be more open minded, willing to read and spare time to get familiar to the Unix OSes that are around. But the advantages are and the power that these kind of systems offer, which is probably unlimited compared with the Windowz strict and limited way of operating. If you really don't want that kind of power (thus doing what you must faster, better and in a more efficient way) then you are in the wrong place. A good way to start solving all questions concerning the FreeBSD is its handbook or the perhaps the FAQ. http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/ PS Try some googling or the freebsd official site for more resources. I'm sure all your questions will be satisfied. Theodoros Goltsios Kinetix Tele.com Support Center email: [EMAIL PROTECTED], [EMAIL PROTECTED] Tel. & Fax: +30 2310556134 WWW: http://www.kinetix.gr/ Latitude wrote: I'm interested in changing over to FreeBSD from Windows, but I'll have to say, you guys don't really present a forceful argument to Windows users of how easy the switch may be. I get knee-deep in FreeBSD jargon the second I get to your webpage. I need to see an overwhelming argument that FreeBSD is a perfectly acceptable alternative for home desktop users who have previously known only Windows. For instance, if I download and install FreeBSD, will I instantly have a desktop windowing environment that I can navigate in while I figure out what's going on? Will I have a browser and way to setup an internet connection right off the bat? How will I migrate files from other operating systems? I understand you guys have been around for a while, but you don't seem to understand the monumental "fear" involved in switching operating systems. You need to address those concerns head on from the start. I need to see several screenshots of apps that I can use as alternatives to what I have. Help me (and yourselves) out. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: How to add rule with pfctl...
Well I think that you mean to add this:
ext_if="rl0" # Or whatever your interface is ifconfig helps to find out
block drop in quick on $ext_if inet proto tcp from 192.168.0.1 to
$ext_if port ssh
or even:
ext_if="rl0"
external_addr="192.168.1.11"
block drop in quick on $ext_if inet proto tcp from 192.168.0.1 to
$external_addr port ssh
Think of macros as variables. As long as you don't define them they
don't exist (are empty).
Agus wrote:
2007/9/15, Mel <[EMAIL PROTECTED]>:
On Saturday 15 September 2007 23:18:17 Agus wrote:
I am trying to figure out how to add a firewall rule with pfctl...
This is what i'm trying to do...
I've got SEC that matches certain pattern and takes the IP from that and
want to trigger a firewall rule to block that IP
Then after a couple of hours SEC will trigger the command to un-block
the
IP...
So what i need is the command to block an IP address from command line,
not
touching any pf.conf
If you don't need to add a rule but an IP, then tables are your friend.
Example for /etc/pf.conf:
# Placeholder for spammers table, non-routable network IP.
table persist { 192.168.111.111 }
# Block this traffic
block return-rst in log on $ext_if proto tcp from port smtp
Then on the command line:
/sbin/pfctl -t spammers -Tadd ip.from.new.spammer
And to delete:
/sbin/pfctl -t spammers -Tdel ip.from.old.spammer
--
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "
[EMAIL PROTECTED]"
Hi,
I put this on /etc/pf.conf
external_addr="192.168.1.11" which is the address of the only interface.
This machine isn't a router.
block drop in quick on $ext_if inet proto tcp from 192.168.0.1 to
$external_addr port ssh
but when i try to connect from 192.168.0.1 i connect with no problems...this
rule is to block access..
What am i doing wrong..is my first time with pf...
Thankss...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
