CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

security/bruteblock 0.8.0

Software for blocking bruteforce attacks with ipfw

Port info

Maintainer
samm@FreeBSD.org
Packages
latest: 0.8.0
Upstream
up to date
Last update
to 0.8.0 · a0c862463c
Quarterly
2026Q4: 0.1.1
WWW
https://github.com/samm-git/bruteblock/
Links
cgit · VuXML

Install

Package
# pkg install bruteblock
installs 0.8.0 from latest; from quarterly (2026Q4) 0.1.1
Port
# cd /usr/ports/security/bruteblock && make install clean
# make -C /usr/ports/security/bruteblock config  # change options first
Size
35 KiB download · 100 KiB installed
Depends on
devel/pcre2 10.49
License
BSD3CLAUSE
Options
1 of 1 on in the package: DOCS
pkg-message
Shown after installing
Configuration of the bruteblock is done via configuration files
located at /usr/local/etc/bruteblock.

To run the script, append following lines to /etc/syslog.conf:

    !*
    auth.info;authpriv.info    |exec /usr/local/sbin/bruteblock -f /usr/local/etc/bruteblock/ssh.conf

and restart syslogd.

Also you should add ipfw2 table and the corresponding deny rule.
For example,

    ipfw add deny ip from table(1) to any

Next, you'll want to setup periodical cleanup of ipfw2 table.
Add following lines to /etc/rc.conf:

    bruteblockd_enable="YES"
    bruteblockd_table="1"
    bruteblockd_flags="-s 5"

and start bruteblockd:

    service bruteblockd start

See bruteblock(8) for more details.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 160.8.00.8.0–
FreeBSD 150.8.00.8.0–
FreeBSD 140.8.00.8.00.8.0

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 150.1.10.1.1–
FreeBSD 140.1.10.1.10.1.1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 0.8.0.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (49)

Oleksii Samorukov (samm) · 0.8.0
security/bruteblock: correct homepage url
a0c862463c
Oleksii Samorukov (samm) · 0.8.0
security/bruteblock: upgrade to 0.0.8 (bugfix release)
db05d37c97
Oleksii Samorukov (samm) · 0.7.0
security/bruteblock: upgrade to 0.0.7 (added IPv6)
545cc989ff
Oleksii Samorukov (samm) · 0.1.1
security/bruteblock: upgrade to 0.1.1
c1808173dc
Oleksii Samorukov (samm) · 0.1.0
security/bruteblock: upgrade to 0.1.0 to fix FreeBSD 15 build
b654a3e9e3
Dmitry Marakasov (amdmi3) · 0.0.6
security/bruteblock: whitespace fix

Approved by:	portmgr blanket
2c08f19d88
Oleksii Samorukov (samm) · 0.0.6
security/bruteblock: update to 0.0.6

- use pcre2 instead of pcre
- integrate patches from the port
- take maintainership

PR: 282821
ac02820455
Baptiste Daroussin (bapt) · 0.0.5_11
MAN?PREFIX: eleminate its usage  and move man to share/man
e4610fcb8b
Stefan Eßer (se) · 0.0.5_10
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 0.0.5_10
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Dmitry Marakasov (amdmi3) · 0.0.5_10
security/bruteblock: renovate

- Update URLs
- Reformat pkg-message and fix service start command [1]
- Add LICENSE
- Switch to options helpers
- Fix manpage location
- Silence mkdirs

Submitted by:	Elvin Aslanov [1]
GitHub:		fixes #129
af556305e8
Dmitry Marakasov (amdmi3) · 0.0.5_9
security/bruteblock: update manpage location
99241f06fd
Dmitry Marakasov (amdmi3) · 0.0.5_9
Remove useless Created by: headers mentioning me
5823922c58
Mathieu Arnold (mat) · 0.0.5_9
all: Remove all other $FreeBSD keywords.
135fdeebb9
Mathieu Arnold (mat) · 0.0.5_9
Remove # $FreeBSD$ from Makefiles.
305f148f48
Mathieu Arnold (mat) · 0.0.5_9
Convert to UCL & cleanup pkg-message (categories s)
bc89cd3d2c
Alexey Dokuchaev (danfe) · 0.0.5_9
For ports in `security' category: remove redundant PKGMESSAGE assignment, which is set appropriately by the b.p.m when `pkg-message' appears on the SUB_FILES list.
31ae8a4948
Dmitry Marakasov (amdmi3) · 0.0.5_9
- Fix trailing whitespace in pkg-messages

Approved by:	portmgr blanket
e87a8bd319
Mathieu Arnold (mat) · 0.0.5_9
Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.

With hat:	portmgr
Sponsored by:	Absolight
597afc47ba
Dmitry Marakasov (amdmi3) · 0.0.5_9
- Switch to @sample
90d5e0a5d8
Dmitry Marakasov (amdmi3) · 0.0.5_9
- Start before syslogd

This is needed as bruteblock (not to be confused with bruteblockd)
which is usually run from syslog, also requires ldconfig, and bruteblockd
rc.d script provides it for him by depending on ldconfig and running
before syslogd

PR:		199263
a5eb72353c
Dmitry Marakasov (amdmi3) · 0.0.5_8
- Fix boottime startup by requiring ldconfig in rc.d script

PR:		199263
Submitted by:	fesse@mail.ru
f86d931b4f
Dmitry Marakasov (amdmi3) · 0.0.5_7
- Fix printing time_t on i386

PR:		199263
Submitted by:	fesse@mail.ru
605a348f3e
Dmitry Marakasov (amdmi3) · 0.0.5_6
- Fix regex to match all sshd auth errors

PR:		194382
Submitted by:	ronald-lists@klop.ws
MFH:		2014Q4
4b8ea145f1
Dmitry Marakasov (amdmi3) · 0.0.5_5
- Fix rule reset time on arm

PR:		194381
Submitted by:	ronald-lists@klop.ws
MFH:		2014Q4
3e2b7a507f
Dmitry Marakasov (amdmi3) · 0.0.5_4
- Drop @dirrm* from plist
d5f5255ec7
Dmitry Marakasov (amdmi3) · 0.0.5_4
- Support staging - Use new LIB_DEPENDS syntax
2ed5160e28
Baptiste Daroussin (bapt) · 0.0.5_4
Add NO_STAGE all over the place in preparation for the staging support (cat: security)
a65ed2e51b
Alex Kozlov (ak) · 0.0.5_4
- Remove MAKE_JOBS_SAFE variable

Approved by:	portmgr (bdrewery)
d4041784dc
Dmitry Marakasov (amdmi3) · 0.0.5_4
- Trim Makefile headers - Drop ABI versions from LIB_DEPENDS - OptionsNG - Pet portlint - Switch to dynamic plist where useful - Canonicalize patch names - Fix DOS line endings in patch files
daffe00d4a
Dmitry Marakasov (amdmi3) · 0.0.5_4
- Trim Makefile header - OptionsNG
110a55d43b
Martin Matuska (mm) · 0.0.5_4
Update PCRE to 8.32 Introduces the UTF-32 library pcre32 Bump PORTREVISION in dependent ports
b2c4fbb77a
Doug Barton (dougb) · 0.0.5_3
Move the rc.d scripts of the form *.sh.in to *.in

Where necessary add $FreeBSD$ to the file

No PORTREVISION bump necessary because this is a no-op
9aac569eaa
Martin Matuska (mm) · 0.0.5_3
Bump pcre library dependency due to 8.30 update
dbbf004162
Doug Barton (dougb) · 0.0.5_2
In the rc.d scripts, change assignments to rcvar to use the literal name_enable wherever possible, and ${name}_enable when it's not, to prepare for the demise of set_rcvar().

In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
83eb2c3700
Olli Hauer (ohauer) · 0.0.5_2
-remove MD5
87931c6875
Dmitry Marakasov (amdmi3) · 0.0.5_2
- Fix typo in pkg-message

PR:		149326
Submitted by:	pluknet <pluknet@gmail.com>
ed29ff8f22
Doug Barton (dougb) · 0.0.5_2
Begin the process of deprecating sysutils/rc_subr by s#. %%RC_SUBR%%#. /etc/rc.subr#
1d6b4b3f91
Dmitry Marakasov (amdmi3) · 0.0.5_2
- Update regexps for newer sh versions

PR:		139545 (partially)
Submitted by:	Dmitry Morozovsky <marck@freebsd.org>
fb192eb588
Dmitry Marakasov (amdmi3) · 0.0.5_1
- Update URL of my distfile mirror in 87 ports

Approved by:	portmgr (erwin)
4745bf8510
Dmitry Marakasov (amdmi3) · 0.0.5_1
- Fix build with -j, mark MAKE_JOBS_SAFE
cd87bf0066
Dmitry Marakasov (amdmi3) · 0.0.5_1
- Update address of my distfile mirror
fd202c7a5e
Dmitry Marakasov (amdmi3) · 0.0.5_1
- Remove obsolete 5.x condition
9fed75429c
Dmitry Marakasov (amdmi3) · 0.0.5_1
Update my email address in 132 ports.

Approved by:	miwi (mentor)
e696084d23
Martin Wilke (miwi) · 0.0.5_1
- Fix build problemes - Bump PORTREVISION

PR:             110000 \o/
Submitted by:   Roger Gujord<roger@gujord.com>
Approved by:    maintainer
7c6bb3fc87
Edwin Groothuis (edwin) · 0.0.5
[MAINTAINER] update my email address in 76 ports + mirror some distfiles

I've got a brand new hosting, so change my email to the new
	one.  Also, now I can mirror some distfiles, so update
	MASTER_SITES for some ports.

PR:		ports/107038
Submitted by:	Dmitry Marakasov <amdmi3@mail.ru>
23ac2035b9
Shaun Amott (shaun) · 0.0.5
Update pkg-message[.in] to clarify syslog configuration details.

PR:		ports/104080
Submitted by:	João Rocha Braga Filho <goffredo@gmail.com>
Approved by:	Dmitry Marakasov <amdmi3@mail.ru> (maintainer)
c55391fe1e
Rong-En Fan (rafan) · 0.0.5
- Update to 0.0.5

PR:		ports/102310 (based on)
Submitted by:	Alex Samorukov <samm@os2.kiev.ua>
Approved by:	Dmitry Marakasov <amdmi3@mail.ru> (maintainer)
3802aec851
Rong-En Fan (rafan) · 0.0.4
Add bruteblock 0.0.4, software for blocking bruteforce attacks with ipfw.

PR:		ports/101254
Submitted by:	Dmitry Marakasov <amdmi3 at mail.ru>
93af334482