Adding network & IP to hosts.deny

[Pelle Andersson]

Thanks for your reply!

Does it matter where in the script I put this/these line/lines?
Must it be before or after any other rule?

Thanks

> The firewall would be definitely a better bet than host.deny.
> If you are using ipfw you can simply add a couple of deny rules
like:
>
> ipfw add 100 deny all from 192.168.100.0/24 to me in
>
> Regards
> S.


On Mon, 11 Oct 2004 08:46:40 +0200, Pelle Andersson <pelle at spd.nu>
wrote:
> 
> Hi!
> 
> I have a lot of login attempts from various networks and IP
addresses 
> on my FBSD 4.10 server. I have read the man pages for hosts.deny but

> do not understand how to add networks and IP addresses to it.
> 
> Let's say I want to block the network address 192.168.100.0 and/or
the 
> IP address 192.168.135.77.
> 
> What I understand is when using hosts.deny, I stopping them totally 
> from using any networking services, right?
> 
> Would it be better to let the built-in firewall (/etc/rc.firewall)
to 
> stopping them? I have the firewall activated and have changed the
port 
> for example SSH to a higher one.
> 
> Could someone please provide me with some examples on either using 
> hosts.deny or the default firewall?
> 
> A big thanks in advance,
> Best Regards Pelle
> 
> _______________________________________________
> freebsd-questions at freebsd.org mailing list 
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
"freebsd-questions-unsubscribe at freebsd.org"
> 


--
Subhro Sankha Kar
School of Information Technology
Block AQ-13/1 Sector V
ZIP 700091
India