fishfreek
Feb 7 2006, 07:44 AM
I want to ban the following IP ranges in the APF filewall.
62.194.0.0 - 62.194.83.255
What is the best command to use?
Will "/etc/apf/apf -d 62.194.0.0/62.194.83.255" work?
alex042
Feb 13 2006, 08:45 AM
I dont believe that will work. Usually when we ban ranges its a smaller range than that, but an example would be:
apf -d 62.194.0.0/24
this example would ban 62.194.0.0 - 62.194.0.254
the 1st number signifying the starting ip and the 24 signifying how many ip's from that point (24 being an entire subnet of 254 ip's)i.e.
32=1,31=2,30=4,29=8,28=16,27=32,26=64,25=128,24=256.
I'm not sure how you would ban 999.999.0.0 - 999.999.83.0 without doing all 83 as seperate line items unless you blocked the entire range 999.999.0.0 including those beyond 83.
phiber
Feb 16 2006, 10:56 PM
62.194.0.0/255.255.192.0
62.194.64.0/255.255.240.0
62.194.80.0/255.255.252.0