OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • Archive »
  • 23.1 Legacy Series »
  • blocking a range of external ip addresses
« previous next »
  • Print
Pages: [1]

Author Topic: blocking a range of external ip addresses  (Read 831 times)

RobLatour

  • Full Member
  • ***
  • Posts: 132
  • Karma: 7
    • View Profile
blocking a range of external ip addresses
« on: February 20, 2023, 06:35:09 pm »
I am currently using an alias to block specific external ip v4 addresses; which is great.

However, I would like to be able to all external IP v4 addresses from a specific range of IP addresses.

For example x.y.*.*  (where x and y are specific numbers that I enter, and the * can be anything from 0 to 255)

What is the best approach for this?

Logged

SFC

  • Newbie
  • *
  • Posts: 30
  • Karma: 3
    • View Profile
Re: blocking a range of external ip addresses
« Reply #1 on: February 20, 2023, 07:41:50 pm »
You would create an alias with a type of network, and then put in the appropriate subnet and subnetmask.

If you wanted X.X.*.* - it would be 192.168.0.0/16
X.X.X.* would be 192.168.1.0/24

https://www.freecodecamp.org/news/subnet-cheat-sheet-24-subnet-mask-30-26-27-29-and-other-ip-address-cidr-network-references/
Logged

RobLatour

  • Full Member
  • ***
  • Posts: 132
  • Karma: 7
    • View Profile
Re: blocking a range of external ip addresses
« Reply #2 on: February 20, 2023, 10:25:43 pm »
Perfect, that works really well.  Thank you.
Logged

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • Archive »
  • 23.1 Legacy Series »
  • blocking a range of external ip addresses
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2024 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2