Packet Filter file configuration and some tables and scripts

🎯 This repository hosts a file configuration of Packet Filter on OpenBSD

📝 Here the man for the Packet Filter service configuration file.

🛡️ Secure your network home or a standalone server and reduce the noisy traffic.

Prerequisites

• You need to have an account with doas set correctly.
• Create a folder pf-tables in /etc like:
  • mkdir -p /etc/pf-tables

Usage

RAW Tables

• pf-810ck-81u3734m.pft raw list of all IP's coming from my own honeypot analysis.
  • block in/out
  • crontab: @daily

Scripts

• pf-53cu217y-2314y.sh create a raw list of all IP's requested badly your httpd trhoufg relayd

  • block in
  • crontab: @daily

• pf-810ck-f4c3800k.sh create a raw list of all IP's under Facebook's AS.

  • block in/out
  • crontab: @daily

• pf-810ck-m41n.sh create a raw list from famous stong providers.

  • block in/out
  • crontab: @daily

Blueteam - Check new settings

• You can check through pfctl the statitics or the log of pflog0
  • pfctl -vvs Tables

🐡 Have fun!