I'm currently configuring an ASG220 to replace an aging PII box running iptables, and I'm in the process of working out how best to transfer the iptables script to the Astaro. On our old iptables machine, we implemented a block of bad IP addresses that were blocked coming into the firewall -- essentially, these are all IP addresses that should never be originating from the external internet, and are taken from the bogon list here: http://www.cymru.com/Documents/bogon-bn-agg.txt
My question is: is there a way to define a network group in which I could aggregate all these networks? For ease of maintenance, what I would prefer to do is enter a network group of Bad IP Addresses in which I could enter all these networks. The only way I see to do that now is to enter each network individually, then define a network group, but this seems a bit clumsy to me. Am I missing something here, or could someone point me in the direction of an easier solution?
Much appreciated,
Nick
This thread was automatically locked due to age.
