[BlueOnyx:25663] Re: ip address server-access blocks

[Meaulnes Legler @ MailList]

hello

if you have several servers and don't want to have to block an IP address / address range manually on each one of them, APF Firewall has a cool feature: External Resources

create your IP list of addresses to deny in a textfile, one IP per line, and upload it to a publicly accessible URL, like http://myserver.com/glob_deny.rules_all.txt

then in the GUI: Server Management > Security > APF Firewall > External Resources, add [myserver.com/glob_deny.rules_all.txt] into the Deny URL field with the http protocol and > [√Save]

of course you would have to do this on each server, but just once. Then, when you want to add a new address to block, just edit your list and the changes are applied to all servers the next day.

best regards

で⊃ Meaulnes Legler
Zurich, Switzerland
+41¦0 44 260-1660