GSP
Quick Navigator

Search Site

Unix VPS
A - Starter
B - Basic
C - Preferred
D - Commercial
MPS - Dedicated
* Sign Up! *

Support
Customer Portal
Contact Us
Online Help
Handbooks
Domain Status
Man Pages

FAQ
Virtual Servers
Pricing
Billing
Technical

Network
Facilities
Connectivity
Topology Map

Miscellaneous
Server Agreement
Year 2038
Credits
 

USA Flag

 

 

Man Pages
BLACKLISTCTL(8) FreeBSD System Manager's Manual BLACKLISTCTL(8)

blacklistctldisplay and change the state of the blacklistd database

blacklistctl dump [-abdnrw] [-D dbname]

blacklistctl is a program used to display and change the state of the blacklistd(8) database. The following sub-commands are supported:

The following options are available for the dump sub-command:

Show all database entries, by default it shows only the active ones. Inactive entries will be shown with a last-access (or, with -r, the remaining) time of ‘never’.
Show only the blocked entries.
dbname
Specify the location of the blacklistd database file to use. The default is /var/db/blocklistd.db.
Increase debugging level.
Don't display a header.
Show the remaining blocked time instead of the last activity time.
Normally the width of addresses is good for IPv4, the -w flag, makes the display wide enough for IPv6 addresses.

The output of the dump sub-command consists of a header (unless -n was given) and one line for each record in the database, where each line has the following columns:

address/ma:port
The remote address, mask, and local port number of the client connection associated with the database entry.
id
column will show the identifier for the packet filter rule associated with the database entry, though this may only be the word ‘OK’ for packet filters which do not create a unique identifier for each rule.
nfail
The number of reported for the client on the noted port, as well as the number of failures allowed before blocking (or, with -a, an asterisk ⟨*⟩)
‘last access’ | ‘remaining time’
The last time a the client was reported as attempting access, or, with -r, the time remaining before the rule blocking the client will be removed.

The blacklistctl program has been renamed to blocklistctl(8).

Sometimes the reported number of failed attempts can exceed the number of attempts that blacklistd(8) is configured to block. This can happen either because the rule has been removed manually, or because there were more attempts in flight while the rule block was being added. This condition is normal; in that case blacklistd(8) will first attempt to remove the existing rule, and then it will re-add it to make sure that there is only one rule active.

blacklistctl first appeared in NetBSD 7. FreeBSD support for blacklistctl was implemented in FreeBSD 11.

Christos Zoulas

January 27, 2025 FreeBSD 15.1-RELEASE-p1

Search for    or go to Top of page |  Section 8 |  Main Index

Powered by GSP Visit the GSP FreeBSD Man Page Interface.
Output converted with ManDoc.