Volker Kuhlmann wrote:
FW_REJECT_IP=123.123.123.0/24
Interesting. Please tell us what suse version and SuSEfirewall2 version that is. The latest available for 9.1 pro is SuSEfirewall2-3.1-310.3.noarch.rpm from the updates, and none of the files it contains have a FW_REJECT_IP string anywhere. Using the custom script option is the quickest way.
Such a feature will be available in 9.2.
Blocking obnoxious IPs has been on my wish list since day 1, but I'm not quite sure what I should make of SuSEfirewall2 as for the past years it seems minimally maintained, but not developed.
I've cleaned up SuSEfirewall2 quite a bit for 9.2, so it is developed again. You can find the current development version in www.suse.de/~lnussel or in my people/ directory on the ftp. Feedback or patches are welcome of course :-) cu Ludwig -- (o_ Ludwig Nussel //\ SUSE LINUX AG, Development V_/_ http://www.suse.de/