<![CDATA[How to block AS numbers??]]>Hi

A lot is asking about facebook.com and the easy way is blocking AS numbers.

https://www.peeringdb.com/net/979

If we could extract the IP's from a DB then pfblocker could be made to do that...

It does it allredy on geoIP level defined by countries.

How much work would it be??

@BBcan177

]]>https://forum.netgate.com/topic/167017/how-to-block-as-numbersRSS for NodeSat, 06 Jun 2026 04:21:31 GMTWed, 06 Oct 2021 09:11:13 GMT60<![CDATA[Reply to How to block AS numbers?? on Thu, 07 Oct 2021 08:16:40 GMT]]>This AS filtering works pretty well.
Dono if it's perfect, but looking at the cheer number of firewall rule hits overnight, it did block a lot.
I have to remove it now, as people start to look in my direction.

Found this on the forum :

whois -h whois.radb.net -- '-i origin AS32934' | grep ^route | grep -v route6 | cut -d" " -f7 > /var/www/block_lists/facebook.txt
]]>https://forum.netgate.com/post/1004771https://forum.netgate.com/post/1004771Thu, 07 Oct 2021 08:16:40 GMT<![CDATA[Reply to How to block AS numbers?? on Wed, 06 Oct 2021 15:13:15 GMT]]>Initially, this didn't work for me.
The IP I used was 157.240.20.15, an IP from the 157.240.0.0/17 network, member of the AS32934.
I switched from the to coffee : nothing helped.

Then :

41f92ebd-3958-4000-99d8-2afba7463842-image.png

I'm using IPv6 - facebook uses IPv6. .... (slam head).

After creating a 'AS32934' entry on the IPv6 tab, and reloaded of pfB.
I didn't need to test ..... some one was already yelling in the building ....
It's 17h08 : I'm off to home - I'll keep this one for the night ;)

]]>https://forum.netgate.com/post/1004698https://forum.netgate.com/post/1004698Wed, 06 Oct 2021 15:13:15 GMT<![CDATA[Reply to How to block AS numbers?? on Wed, 06 Oct 2021 14:40:10 GMT]]>@cool_corona Just create an alias - use it how ever you want..

]]>https://forum.netgate.com/post/1004694https://forum.netgate.com/post/1004694Wed, 06 Oct 2021 14:40:10 GMT<![CDATA[Reply to How to block AS numbers?? on Wed, 06 Oct 2021 14:22:52 GMT]]>@johnpoz Outbound also?

]]>https://forum.netgate.com/post/1004690https://forum.netgate.com/post/1004690Wed, 06 Oct 2021 14:22:52 GMT<![CDATA[Reply to How to block AS numbers?? on Wed, 06 Oct 2021 14:20:12 GMT]]>@cool_corona said in How to block AS numbers??:

easy way is blocking AS numbers.

You can already do that with pfblocker..

blockas.jpg

]]>https://forum.netgate.com/post/1004689https://forum.netgate.com/post/1004689Wed, 06 Oct 2021 14:20:12 GMT<![CDATA[Reply to How to block AS numbers?? on Wed, 06 Oct 2021 14:09:38 GMT]]>@cool_corona said in How to block AS numbers??:

A lot is asking about facebook.com

Yeah.
Right.
They even started to auto block themselves. It wasn't AS, most kids became BGP experts in one evening.

]]>https://forum.netgate.com/post/1004688https://forum.netgate.com/post/1004688Wed, 06 Oct 2021 14:09:38 GMT