Friday, May 29, 2020

Re: Restore pf tables metadata after a reboot

-----BEGIN PGP SIGNATURE-----
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=fbyc
-----END PGP SIGNATURE-----
> 28. mai 2020 kl. 19:09 skrev Bruno Flueckiger <inform.me@gmx.net>:
>
>
> You can save the list of IPs in a table and reload it after a reboot as
> described here: https://www.bsdhowto.ch/savepftables.html


I have a similar setup at bsdly.net <http://bsdly.net/>, only I dump the tables to file and run expiry via a cron job that runs twice an hour - the writeup at https://bsdly.blogspot.com/2017/04/forcing-password-gropers-through.html <https://bsdly.blogspot.com/2017/04/forcing-password-gropers-through.html> has most of the useful info and some related wrinkles.

All the best,



Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/
"Remember to set the evil bit on all malicious network traffic"
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.

No comments:

Post a Comment