blocking IPs by file

blocking IPs by file

[Thomas Raef]

What's the best way to block a list of IP addresses from a text file?

 

I've been looking into using a script and ipset. Is this the best way.

 

I'd like to update the text file with new IP addresses as easy as
possible

 

Thank you in advance.

 

 

Re: blocking IPs by file

[/dev/rob0]

On Thursday 2005-September-01 17:45, Thomas Raef wrote:
> What's the best way to block a list of IP addresses from a text file?

There was a very similar thread two days ago: "macro & iptables". But 
no, iptables won't read your text file on its own. You will have to run 
your script when you make changes.
-- 
    mail to this address is discarded unless "/dev/rob0"
    or "not-spam" is in Subject: header

Re: blocking IPs by file

[curby .]

On 9/1/05, Thomas Raef <traef06@ebasedsecurity.com> wrote:
> What's the best way to block a list of IP addresses from a text file?

I'm not sure if you're looking for an existing solution or want to
script your own.  If you want to make one, it's good to use a custom
chain because then you can easily add to it without reloading the
entire firewall or taking pains to find out where in the list of rules
you need to insert.

RE: blocking IPs by file

[Thomas Raef]

I'm just looking for something that's considered the "best way".

Thank you for the comment about using a custom chain. That makes sense.

-----Original Message-----
From: curby . [mailto:curby.public@gmail.com] 
Sent: Thursday, September 01, 2005 7:00 PM
To: Thomas Raef
Cc: netfilter@lists.netfilter.org
Subject: Re: blocking IPs by file

On 9/1/05, Thomas Raef <traef06@ebasedsecurity.com> wrote:
> What's the best way to block a list of IP addresses from a text file?

I'm not sure if you're looking for an existing solution or want to
script your own.  If you want to make one, it's good to use a custom
chain because then you can easily add to it without reloading the
entire firewall or taking pains to find out where in the list of rules
you need to insert.