Steffen's Knowledge Base

Created at: 2019-09-24 12:30:00
Last modified at: 2024-03-22 11:15:54
Author: Steffen Rick

Notes on ipfilter

IPFilter mailinglist
https://sourceforge.net/p/ipfilter/mailman/ipfilter-devel/
Malicious ip addresses collected
https://github.com/trick77/ipset-blacklist Blacklists from ipset
https://zeltser.com/malicious-ip-blocklists/ Site with different ip blacklists
IPPool commands
# list pools
ipool -l

# load pool
ippool -f ippool.conf -dv

# flush pool (remove all entries)
ippool -F

# ippool.conf
table role = ipf type = tree number = 100
{
  1.2.3.4;
}

# ipfilter rule to use the pool
block in quick on re0 from pool/100 to any
ipfilter commands
# startup the firewall and flush the existing rules
ipf -Fa -v -f /etc/ipf.rules

# show input rules
ipfstat -i

# display log entries
ipmon -a -p

# ipnat start
ipnat -CF -f /etc/ipnat.rules