PF firewall whitelist

S

Silfro

How do I add an IP to the whitelist from PF firewall? Because my root server keeps blocking the IP from my webhost after a few hours.
 
Silfro said:
How do I add a IP to the whitelist from PF Firewall??
Because my root server keep blocking the IP from my webhost after few hours..
Click to expand...

Code: 
pass in log quick from <whitelist> flags S/SA synproxy state

This the simplest way. Yet it is not my recommendation since I don't know what is causing your IP address to be blocked.
If you are being blocked on a public service such as http then there is definitely something wrong with your configuration.
Why don't you post your pf.conf, obscure your public IP, and then maybe we can see if something needs to be fixed.
 
Code: 
### INTERFACES ###
if = "{ re0 }"

#Intra
table <intranet> { 127.0.0.1 192.168.2.111 }
pass in quick from <intranet> to any keep state

#Network
table <network> persist
block quick from <network>
pass in on $if proto tcp from any to any \
keep state (max-src-conn 100, max-src-conn-rate 15/1, \
overload <network> flush global)

#ruleset
block in all
pass in quick on lo0
pass out quick on lo0
table <bruteforce> persist file "/var/db/blacklist"
block quick from <bruteforce>
pass in quick on re0 proto tcp from any to any port 22 keep state
pass in quick on re0 proto tcp from any to any port 3306 keep state
pass in quick on re0 proto tcp from any to any port 11002 keep state
pass in quick on re0 proto tcp from any to any port 13000 keep state
pass in quick on re0 proto tcp from any to any port 13001 keep state
pass in quick on re0 proto tcp from any to any port 13099 keep state
pass out all keep state
 
Maybe you need to adjust those settings a bit. Or separate them on per service base:

Code: 
pass in on $if proto tcp from any to any \
keep state (max-src-conn 100, max-src-conn-rate 15/1, \
overload <network> flush global)

Another option would be to add your IP to the <intranet> table.
 
Silfro said:
Im new in this kind of stuff. I dont know how I could add the IP to the intranet table.
Click to expand...

Code: 
table <intranet> { 127.0.0.1, 192.168.2.111, xxx.xxx.xxx.xxx }

Where xxx.xxx.xxx.xxx is the IP address.
 
You must log in or register to reply here.
Back
Top