Page MenuHomeDevCentral

Enable pf firewall
ClosedPublic

Authored by dereckson on Oct 21 2024, 00:19.
Tags
None
Referenced Files
F9579828: D3549.diff
Sun, Jun 8, 15:49
Unknown Object (File)
Sat, Jun 7, 15:06
Unknown Object (File)
Thu, Jun 5, 18:55
Unknown Object (File)
Wed, Jun 4, 02:18
Unknown Object (File)
Wed, Jun 4, 02:18
Unknown Object (File)
Sat, May 31, 20:20
Unknown Object (File)
Fri, May 30, 23:21
Unknown Object (File)
Fri, May 30, 19:38
Subscribers
None

Details

Summary

Brute-force attacks can create a lot of noise in system logs.
It could be convenient to be able to use a command to block a specific IP:

$ pfctl -t badhosts -T add $IP_TO_BLOCK

pf has the advantage to create easier to read rules than ipfilter and ipfw,
and to be still actively maintained.

Test Plan

Deployed on Hervil

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Errors
SeverityLocationCodeMessage
Error_modules/node.py:479E501flake8 E501
Unit
No Test Coverage
Branch
pf
Build Status
Buildable 5633
Build 5915: arc lint + arc unit