https://github.com/seheyah/packet-filter

The amazing and famous PF with some tables coming from honeypots.
https://github.com/seheyah/packet-filter

blocklists firewall openbsd pf security

Last synced: 24 days ago
JSON representation

The amazing and famous PF with some tables coming from honeypots.

• Host: GitHub
• URL: https://github.com/seheyah/packet-filter
• Owner: seheyah
• License: gpl-3.0
• Created: 2023-01-23T20:54:09.000Z (over 2 years ago)
• Default Branch: main
• Last Pushed: 2023-07-15T20:30:03.000Z (almost 2 years ago)
• Last Synced: 2025-02-13T08:52:41.571Z (3 months ago)
• Topics: blocklists, firewall, openbsd, pf, security
• Language: Shell
• Homepage:
• Size: 53.7 KB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# Packet Filter file configuration and some tables and scripts

🎯 This repository hosts a file configuration of Packet Filter on [OpenBSD](https://www.openbsd.org)

📝 Here the [man](https://man.openbsd.org/pf.conf) for the Packet Filter service configuration file.

🛡️ Secure your network home or a standalone server and reduce the noisy traffic.

## Prerequisites

 * You need to have an account with doas set correctly.

 * Create a folder `pf-tables` in /etc like:

   * `mkdir -p /etc/pf-tables`

## Usage

## RAW Tables

* [pf-810ck-81u3734m.pft](https://github.com/seheyah/packet-filter/blob/main/pf-810ck-81u3734m.pft) raw list of all IP's coming from my own honeypot analysis.

  * block in/out

  * crontab: @daily

## Scripts

* [pf-53cu217y-2314y.sh](https://github.com/seheyah/packet-filter/blob/main/pf-53cu217y-2314y.sh) create a raw list of all IP's requested badly your httpd trhoufg relayd

  * block in

  * crontab: @daily

    

* [pf-810ck-f4c3800k.sh](https://github.com/seheyah/packet-filter/blob/main/pf-810ck-f4c3800k.sh) create a raw list of all IP's under Facebook's AS.

  * block in/out

  * crontab: @daily

* [pf-810ck-m41n.sh](https://github.com/seheyah/packet-filter/blob/main/pf-810ck-m41n.sh) create a raw list from famous stong providers.

  * block in/out

  * crontab: @daily

    

## Blueteam - Check new settings

* You can check through `pfctl` the statitics or the log of pflog0

  * `pfctl -vvs Tables`

🐡 Have fun!