12017ca883
This import includes The basic blacklist library and utility programs, to add a system-wide packet filtering notification mechanism to FreeBSD. The rational behind the daemon was given by Christos Zoulas in a presentation at vBSDcon 2015: https://youtu.be/fuuf8G28mjs Reviewed by: rpaulo Approved by: rpaulo Obtained from: NetBSD Relnotes: YES Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D5912
15 lines
345 B
Plaintext
15 lines
345 B
Plaintext
# Blacklist rule
|
|
# adr/mask:port type proto owner name nfail disable
|
|
[local]
|
|
ssh stream * * * 3 6h
|
|
ftp stream * * * 3 6h
|
|
domain * * named * 3 12h
|
|
#6161 stream tcp6 christos * 2 10m
|
|
* * * * * 3 60
|
|
|
|
# adr/mask:port type proto owner name nfail disable
|
|
[remote]
|
|
#129.168.0.0/16 * * * = * *
|
|
#6161 = = = =/24 = =
|
|
#* stream tcp * = = =
|