On Jan 29, 2023, at 11:14 PM, william@thinktankworkspaces.com wrote:
> 
> Do we have any firewall tools? I would like to block some connections. 
> 
> I know you can tweak routing by messing with /net/ipifc/clone
> 
> Just wanted to know if we have any other ways to block conncetions?
> 
> 
> 
> Quoth Stanley Lieber <sl@stanleylieber.com>:
>> check out iwhois (documented in the tel man page).
>> 
>> also: lookman dns.
>> 
>> the existing tools are fairly manual and rudimentary.
>> 
>> sl

there’s no generic firewall, but upas has some filtering options. smtpd(8) reads the file /mail/blocked for blocked addresses, and has the -k flag to block ip addresses manually. the validatesender script (called by upas) checks for a spamhaus file at /mail/lib/spamhaus. there are also ratfs(4) and scanmail(8), which provide more complex filtering mechanisms.

sl