Re: PF and GeoIP to update country table?

2007-05-09 Thread Volker
On 05/09/07 17:23, Abdullah Ibn Hamad Al-Marri wrote: [snip] >> unfortunately I'm unable to imagine if it's nice or really, really bad >> idea to block certain countries. It sounds like a chinese wall. If the >> machine in question is a web server, it might be a hardly bad idea and >> would lead in

Re: Re: PF and GeoIP to update country table?

2007-05-09 Thread Abdullah Ibn Hamad Al-Marri
On 5/9/07, Volker <[EMAIL PROTECTED]> wrote: On 12/23/-58 20:59, Abdullah Ibn Hamad Al-Marri wrote: > Another question, how about the update per month? do I need to kill pf > and run it again? or a crontab would do the trick and update the IPs? Abdullah, unfortunately I'm unable to imagine if i

Re: freebsd-pf Digest, Vol 137, Issue 3

2007-05-09 Thread iggdawg
Hi, The following command could be loaded via cron with the "monthly" crontask, or via some other script (assuming blacklist table is "GeoList" and you are using the default pf.conf) pfctl -t hotlist -T flush -Tl -f /etc/pf.conf > > Hello, > > > > I would like to use GeoIP db and update the co

Re: Re: PF and GeoIP to update country table?

2007-05-09 Thread Volker
On 12/23/-58 20:59, Abdullah Ibn Hamad Al-Marri wrote: > Another question, how about the update per month? do I need to kill pf > and run it again? or a crontab would do the trick and update the IPs? Abdullah, unfortunately I'm unable to imagine if it's nice or really, really bad idea to block ce

Re: PF and GeoIP to update country table?

2007-05-09 Thread Miroslav Lachman
Abdullah Ibn Hamad Al-Marri wrote: On 5/9/07, Miroslav Lachman <[EMAIL PROTECTED]> wrote: Abdullah Ibn Hamad Al-Marri wrote: > Hello, > > I would like to use GeoIP db and update the country db rule, then make > the pf to read the db, and allow certian contries to connect to the > web server.

Re: PF and GeoIP to update country table?

2007-05-09 Thread Miroslav Lachman
Abdullah Ibn Hamad Al-Marri wrote: Hello, I would like to use GeoIP db and update the country db rule, then make the pf to read the db, and allow certian contries to connect to the web server. Is this possible? Yes, I am using it. Just download and uncompress the CSV GeoIP version and do som

Re: PF and GeoIP to update country table?

2007-05-09 Thread Abdullah Ibn Hamad Al-Marri
On 5/9/07, Miroslav Lachman <[EMAIL PROTECTED]> wrote: Abdullah Ibn Hamad Al-Marri wrote: > Hello, > > I would like to use GeoIP db and update the country db rule, then make > the pf to read the db, and allow certian contries to connect to the > web server. > > Is this possible? Yes, I am using

PF and GeoIP to update country table?

2007-05-09 Thread Abdullah Ibn Hamad Al-Marri
Hello, I would like to use GeoIP db and update the country db rule, then make the pf to read the db, and allow certian contries to connect to the web server. Is this possible? -- Regards, -Abdullah Ibn Hamad Al-Marri Arab Portal http://www.WeArab.Net/ __