<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>null blog &#187; rule set</title>
	<atom:link href="http://devnull.ro/node/tag/rule-set/feed" rel="self" type="application/rss+xml" />
	<link>http://devnull.ro</link>
	<description>Random ramblings of nil importance</description>
	<lastBuildDate>Mon, 21 May 2012 11:33:57 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.2</generator>
		<item>
		<title>PF drop list</title>
		<link>http://devnull.ro/node/138</link>
		<comments>http://devnull.ro/node/138#comments</comments>
		<pubDate>Tue, 02 Jun 2009 08:32:36 +0000</pubDate>
		<dc:creator>ggl</dc:creator>
				<category><![CDATA[Scitech]]></category>
		<category><![CDATA[BSD]]></category>
		<category><![CDATA[PF]]></category>
		<category><![CDATA[rule set]]></category>
		<category><![CDATA[spam]]></category>

		<guid isPermaLink="false">http://blog.devnull.ro/?p=138</guid>
		<description><![CDATA[It&#8217;s been a while since we haven&#8217;t had any BSD related posts. I have recently modified this script to generate a PF ruleset from the Spamhaus DROP list in order to keep evil packets out of your network. The DROP list is a tiny subset of the SBL containing netblocks controlled entirely by spammers. The [...]]]></description>
			<content:encoded><![CDATA[<p>It&#8217;s been a while since we haven&#8217;t had any BSD related posts.</p>
<p>I have recently modified <a href="http://break-left.org/blog/?p=279">this</a> script to generate a <a href="http://www.openbsd.org/faq/pf/index.html">PF</a> ruleset from the Spamhaus <a href="http://www.spamhaus.org/drop/index.lasso">DROP</a> list in order to keep evil packets out of your network. The DROP list is a tiny subset of the <a href="http://www.spamhaus.org/sbl/index.lasso">SBL</a> containing netblocks controlled entirely by spammers. The modified script you can get <a href="http://blog.devnull.ro/wp-content/uploads/2009/06/makedropsh.gz"><a href="http://blog.devnull.ro/wp-content/uploads/2009/08/makedrop.sh.gz">here</a></a>. To use it, put it somewhere in your PATH and run it once a day via cron. The ruleset is loaded via an <a href="http://www.openbsd.org/faq/pf/anchors.html">anchor</a>. In order to load it at boot time, put the following lines in your <em>pf.conf</em> above the usual rules:</p>
<p><code># anchor for Spamhaus DROP list<br />
anchor droplist<br />
load anchor droplist from "/etc/pf.drop"</code></p>
<p>Enjoy.</p>
]]></content:encoded>
			<wfw:commentRss>http://devnull.ro/node/138/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

