Help - Search - Members - Calendar
Full Version: Banning range of IP's in APF
The Planet Forums > Security > Firewalls
fishfreek
I want to ban the following IP ranges in the APF filewall.

62.194.0.0 - 62.194.83.255

What is the best command to use?

Will "/etc/apf/apf -d 62.194.0.0/62.194.83.255" work?
alex042
I dont believe that will work. Usually when we ban ranges its a smaller range than that, but an example would be:

apf -d 62.194.0.0/24

this example would ban 62.194.0.0 - 62.194.0.254

the 1st number signifying the starting ip and the 24 signifying how many ip's from that point (24 being an entire subnet of 254 ip's)i.e.
32=1,31=2,30=4,29=8,28=16,27=32,26=64,25=128,24=256.

I'm not sure how you would ban 999.999.0.0 - 999.999.83.0 without doing all 83 as seperate line items unless you blocked the entire range 999.999.0.0 including those beyond 83.
phiber
62.194.0.0/255.255.192.0
62.194.64.0/255.255.240.0
62.194.80.0/255.255.252.0
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.