Re: blacklistd vs blocklistd

Dag-Erling Smørgrav <[email protected]>
Newsgroups gmane.os.freebsd.questions
Message-ID <[email protected]> 
Doug Hardie <[email protected]> writes:
> I switched back to blocklistd, but the previous blacklistd entries
> show with blocklistctl, but pfctl only finds 5 entries whereas before
> there were over 800.  Also, I previously was seeing around 80 new
> blocking entries added every hour.  Now I am seeing 2 in the pf
> tables.

Switching from one to the other changes the name of the pf anchor.  Did
you update your pf.conf accordingly, and are you sure you're looking at
the correct anchor and table?  For instance, if running blocklistd, you
would use the following command to see blocked IPs:

    sudo pfctl -a blocklistd/22 -t port22 -Ts

DES
-- 
Dag-Erling Smørgrav - [email protected]
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.