<![CDATA[Migrating BSD packet filter to pfsense]]>I'm migrating from openBSD packet filter to pfsense.
Trying to convert a pf.config file to the web menu pfsense format.

pf.config had:

table <abusive_hosts> file "/etc/pf.abusive"
block in quick from { <abusive_countries>, <abusive_hosts>}

How do I port this to pfsense?
How does pfsense read the 92k line abusive hosts file?

I also have tables with IP ranges that include exceptions. e.g.
table <invalid_ip4> { X.X.X.0/24 !X.X.X.12/2 !X.X.X.99 }

How do I specify that sort of alias in pfsense?

Thanks for any and all help.

]]>https://forum.netgate.com/topic/142512/migrating-bsd-packet-filter-to-pfsenseRSS for NodeFri, 16 Oct 2026 08:03:04 GMTFri, 12 Apr 2019 22:18:21 GMT60<![CDATA[Reply to Migrating BSD packet filter to pfsense on Fri, 12 Apr 2019 22:48:17 GMT]]>thanks!

so, instead of a file name an rely on the OS to read the file,
use a url that points to the abusive hosts text file.

well, I suppose a piece of network equipment would want to use the network to access stuff. :)
that'll work. I can deal...

got any suggestions for the 2nd part? how to express exceptions to blocks of host ip addresses?

]]>https://forum.netgate.com/post/836874https://forum.netgate.com/post/836874Fri, 12 Apr 2019 22:48:17 GMT<![CDATA[Reply to Migrating BSD packet filter to pfsense on Fri, 12 Apr 2019 22:25:25 GMT]]>Check / Take a look at:

https://docs.netgate.com/pfsense/en/latest/firewall/aliases.html

]]>https://forum.netgate.com/post/836870https://forum.netgate.com/post/836870Fri, 12 Apr 2019 22:25:25 GMT