Rules For Firewalls

COMPLETELY NO GUARANTEE, USE THEM AT YOUR OWN RISK.
Have problems on this website? Just mail to admin at mail dot dayomon dot net, please.

Automatically updated around 6 p.m. GMT (7 p.m. CET, 2 a.m. HK/SIN) everyday.

	All in one; CN, HK, TW,KR, and MO	CN, China, People's Republic of	HK, Hong Kong Special Administrative Region	TW, known as Taiwan, China, Republic of	KR, known as South Korea, Korea, Republic of	KP, known as North Korea, Korea, Democratic People's Republic of	MO, Macao Special Administrative Region	SG, Singapore, Republic of (Optionally)
ipf	ipf.conf	ipf.conf	ipf.conf	ipf.conf	ipf.conf	ipf.conf	ipf.conf	ipf.conf
ipfw	ipfw.conf.txt	ipfw.conf.txt	ipfw.conf.txt	ipfw.conf.txt	ipfw.conf.txt	ipfw.conf.txt	ipfw.conf.txt	ipfw.conf.txt
safeny	safeny.txt	safeny.txt	safeny.txt	safeny.txt	safeny.txt	safeny.txt	safeny.txt	safeny.txt
iprange(1)	iprange.txt	iprange.txt	iprange.txt	iprange.txt	iprange.txt	iprange.txt	iprange.txt	iprange.txt
iprange(2)	range.txt	range.txt	range.txt	range.txt	range.txt	range.txt	range.txt	range.txt
BIND	easia_bind.txt	easia_bind.txt	easia_bind.txt	easia_bind.txt	easia_bind.txt	easia_bind.txt	easia_bind.txt	easia_bind.txt
Apache	apache.txt	apache.txt	apache.txt	apache.txt	apache.txt	apache.txt	apache.txt	apache.txt
IPTABLES (DROP)	iptables.txt	iptables.txt	iptables.txt	iptables.txt	iptables.txt	iptables.txt	iptables.txt	iptables.txt
IPTABLES (REJECT)	iptablesd.txt	iptablesd.txt	iptablesd.txt	iptablesd.txt	iptablesd.txt	iptablesd.txt	iptablesd.txt	iptablesd.txt

How to use?

Unfortunately, we can't tell you how to utilise them in individual cases.
All we can do at this time for you is to provide these lists.
OpenBSD pf is available, as far as we know, on FreeBSD through ports and on NetBSD.
Of cource, OpenBSD pf can be running on OpenBSD.

An example: Applying rules on OpenBSD pf

At first, Download http://www.dayomon.net/fw/iprange.txt.

wget http://www.dayomon.net/fw/iprange.txt

(With wget, fetch, or something like that.)
Then, put it in your directory, /etc
In the end, add it in the table definitions of /etc/pf.conf

table <krfilter> persist file "/etc/iprange.txt"

This is the actual rule. Put it where you want to apply.

block in on fxp0 from <krfilter> to any

fxp0 is an example interface, thus please change your interface which you want to use.
The table function of OpenBSD pf seems quicker to classify packets than other packet filters.
Therefore, we'd recommend to take advantege of it to filter packets at this moment.

If you would like to contact us

Please use e-mail.
It should be in English, Spanish, Japanese, or Chinese (Mandarin).
It would be better for us that the mail had been written in Traditional Chinese if you wrote to us in Chinese.