How do I deny connections with an IP range?

[mariusmbp]

Hello guys

I would like to know how do I deny incoming and outgoing connections with an IP range? (for example 1.1.1.1 - 1.1.1.255)

I want to perform this task directly into the OS without using any third party software like Little Snitch or DNS or router filtering.

 

[cradom]

How large a range? You could do it in the host file, but each ip would have to be on it's own line.

 

[TattooedMac]

With the aid of a great little App called Little Snitch http://obdev.at/products/littlesnitch/index.html

 

[mariusmbp]

Does anyone know a way?

 

[MacInWin]

You were given two ways, one that is free but labor intensive and one that is easy, but may cost a bit for the product.

 

[McBie]

Just curious ..... why would you want to do such a thing ( directly in the OS ) ?

Cheers ... McBie

 

[mariusmbp]

You were given two ways, one that is free but labor intensive and one that is easy, but may cost a bit for the product.

I don't want to be rude or to offend anyone. I am aware I am here for help but if a member ask for a way to accomplish something without using the app Little Snitch and another member suggest using the exactly Little Snitch app, is this considerate a solution?

 

[Slydude]

I don't think anyone is trying to be rude. Little Snitch may be the best way to do what you want (exclude a range of IP addresses). That's why we were asking exactly what you were trying to do and why it needs to be done without other software such as Little Snitch.

 

[TattooedMac]

I don't want to be rude or to offend anyone. I am aware I am here for help but if a member ask for a way to accomplish something without using the app Little Snitch and another member suggest using the exactly Little Snitch app, is this considerate a solution?

I know that Cradom knows his networking and Terminal stuff, and as his solution, is as mentioned above, labour intensive, I put down Little Snitch, as it's the only way I know to get this done, in a few clicks.
And to be totally honest, I didn't read through the whole post Sorry

 

[pm-r]

I don't know if any of these would work for you, but they are free:

TCPBlock
http://www.macupdate.com/app/mac/35914/tcpblock

Murus Lite
http://www.macupdate.com/app/mac/52393/murus-lite

Just a thought and have a look and try… and I'm sorry that they are third party software you don't seem to want to use…

 

[MacInWin]

I don't want to be rude or to offend anyone. I am aware I am here for help but if a member ask for a way to accomplish something without using the app Little Snitch and another member suggest using the exactly Little Snitch app, is this considerate a solution?

Cradom gave you a free way, no third party, but it is labor intensive. You asked for that, and got it. That is why I said what I said.

 

[mariusmbp]

You can't block connections with an IP in the host file, this is only used for hostnames.
Unfortunately English is not my first language so I don't know how to explain any better then this:

Does anyone know a way to deny incoming and outgoing connections with the IP range 200.200.200.1 - 200.200.200.255 directly into the OS X without using Little Snitch (or any other third party software) or private DNS or router filtering.

Thank you

 

[Dysfunction]

man pfctl


if that doesn't make sense to you, you probably shouldn't mess with it.