Quick APF

I`ve read this about allowing certain IPs access to the server

Quote:

More advanced: /etc/apf/allow_hosts.rules
10. As a safety precaution, you might want to add your ip to the '/etc/apf/allow_hosts.rules' file.

Open the file in your favorite editor.
11. Add the ip of your computer to the end of the file. This will cause all traffic to and from that ip not to be filtered. You can also add the ip's of other servers.

If you want to specify what kind of traffic to allow from those ips that is not covered with the current firewall rules (ie. you blocked all traffic to SSH and only want a few ips to be able to access the SSH port), then this is the format you would use:

Protocol : direction/flow : source/destination port : s/d ip
[tcp/udp] : [in/out] : [s=/d=]PORT : [s=/d=]IP

Ex (let the ip 192.168.0.100 access to port 22):

tcp:in:d=22: s=192.168.0.100

What I`d like to know is if its possible to put an IP range in there instead of just one ip address

such as you specify a range in the conf.apf file upon setup

eg:

tcp:in:d=99_123: s=192.168.0.100

where 99_123 is the port range