| @@ -1,14 +1,14 @@ | | | @@ -1,14 +1,14 @@ |
1 | .\" $NetBSD: blacklistd.8,v 1.22 2020/03/30 08:45:09 wiz Exp $ | | 1 | .\" $NetBSD: blacklistd.8,v 1.23 2020/04/21 13:57:12 christos Exp $ |
2 | .\" | | 2 | .\" |
3 | .\" Copyright (c) 2015 The NetBSD Foundation, Inc. | | 3 | .\" Copyright (c) 2015 The NetBSD Foundation, Inc. |
4 | .\" All rights reserved. | | 4 | .\" All rights reserved. |
5 | .\" | | 5 | .\" |
6 | .\" This code is derived from software contributed to The NetBSD Foundation | | 6 | .\" This code is derived from software contributed to The NetBSD Foundation |
7 | .\" by Christos Zoulas. | | 7 | .\" by Christos Zoulas. |
8 | .\" | | 8 | .\" |
9 | .\" Redistribution and use in source and binary forms, with or without | | 9 | .\" Redistribution and use in source and binary forms, with or without |
10 | .\" modification, are permitted provided that the following conditions | | 10 | .\" modification, are permitted provided that the following conditions |
11 | .\" are met: | | 11 | .\" are met: |
12 | .\" 1. Redistributions of source code must retain the above copyright | | 12 | .\" 1. Redistributions of source code must retain the above copyright |
13 | .\" notice, this list of conditions and the following disclaimer. | | 13 | .\" notice, this list of conditions and the following disclaimer. |
14 | .\" 2. Redistributions in binary form must reproduce the above copyright | | 14 | .\" 2. Redistributions in binary form must reproduce the above copyright |
| @@ -17,27 +17,27 @@ | | | @@ -17,27 +17,27 @@ |
17 | .\" | | 17 | .\" |
18 | .\" THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS | | 18 | .\" THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS |
19 | .\" ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED | | 19 | .\" ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED |
20 | .\" TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR | | 20 | .\" TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR |
21 | .\" PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS | | 21 | .\" PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS |
22 | .\" BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR | | 22 | .\" BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR |
23 | .\" CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF | | 23 | .\" CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF |
24 | .\" SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS | | 24 | .\" SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS |
25 | .\" INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN | | 25 | .\" INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN |
26 | .\" CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) | | 26 | .\" CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) |
27 | .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE | | 27 | .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE |
28 | .\" POSSIBILITY OF SUCH DAMAGE. | | 28 | .\" POSSIBILITY OF SUCH DAMAGE. |
29 | .\" | | 29 | .\" |
30 | .Dd March 29, 2020 | | 30 | .Dd April 21, 2020 |
31 | .Dt BLACKLISTD 8 | | 31 | .Dt BLACKLISTD 8 |
32 | .Os | | 32 | .Os |
33 | .Sh NAME | | 33 | .Sh NAME |
34 | .Nm blacklistd | | 34 | .Nm blacklistd |
35 | .Nd block and release ports on demand to avoid DoS abuse | | 35 | .Nd block and release ports on demand to avoid DoS abuse |
36 | .Sh SYNOPSIS | | 36 | .Sh SYNOPSIS |
37 | .Nm | | 37 | .Nm |
38 | .Op Fl dfrv | | 38 | .Op Fl dfrv |
39 | .Op Fl C Ar controlprog | | 39 | .Op Fl C Ar controlprog |
40 | .Op Fl c Ar configfile | | 40 | .Op Fl c Ar configfile |
41 | .Op Fl D Ar dbfile | | 41 | .Op Fl D Ar dbfile |
42 | .Op Fl P Ar sockpathsfile | | 42 | .Op Fl P Ar sockpathsfile |
43 | .Op Fl R Ar rulename | | 43 | .Op Fl R Ar rulename |
| @@ -179,27 +179,27 @@ The numeric mask to be applied to the bl | | | @@ -179,27 +179,27 @@ The numeric mask to be applied to the bl |
179 | The optional numeric port to be blocked (can be empty). | | 179 | The optional numeric port to be blocked (can be empty). |
180 | .It id | | 180 | .It id |
181 | For packet filters that support removal of rules by rule identifier, the | | 181 | For packet filters that support removal of rules by rule identifier, the |
182 | identifier of the rule to be removed. | | 182 | identifier of the rule to be removed. |
183 | The add command is expected to return the rule identifier string to stdout. | | 183 | The add command is expected to return the rule identifier string to stdout. |
184 | .El | | 184 | .El |
185 | .It Fl c Ar configuration | | 185 | .It Fl c Ar configuration |
186 | The name of the configuration file to read, usually | | 186 | The name of the configuration file to read, usually |
187 | .Pa /etc/blacklistd.conf . | | 187 | .Pa /etc/blacklistd.conf . |
188 | .It Fl D Ar dbfile | | 188 | .It Fl D Ar dbfile |
189 | The Berkeley DB file where | | 189 | The Berkeley DB file where |
190 | .Nm | | 190 | .Nm |
191 | stores its state, usually | | 191 | stores its state, usually |
192 | .Pa /var/run/blacklistd.db . | | 192 | .Pa /var/db/blacklistd.db . |
193 | .It Fl d | | 193 | .It Fl d |
194 | Normally, | | 194 | Normally, |
195 | .Nm | | 195 | .Nm |
196 | disassociates itself from the terminal unless the | | 196 | disassociates itself from the terminal unless the |
197 | .Fl d | | 197 | .Fl d |
198 | flag is specified, in which case it stays in the foreground. | | 198 | flag is specified, in which case it stays in the foreground. |
199 | .It Fl f | | 199 | .It Fl f |
200 | Truncate the state database and flush all the rules named | | 200 | Truncate the state database and flush all the rules named |
201 | .Ar rulename | | 201 | .Ar rulename |
202 | are deleted by invoking the control script as: | | 202 | are deleted by invoking the control script as: |
203 | .Bd -literal -offset indent | | 203 | .Bd -literal -offset indent |
204 | control flush <rulename> | | 204 | control flush <rulename> |
205 | .Ed | | 205 | .Ed |