Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 27 Jan 2000 08:51:07 -0800 (PST)
From:      David Wolfskill <dhw@whistle.com>
To:        freebsd-security@FreeBSD.ORG
Subject:   Re: Riddle me this
Message-ID:  <200001271651.IAA23459@pau-amma.whistle.com>
In-Reply-To: <4.2.2.20000127084138.0454fba0@localhost>

next in thread | previous in thread | raw e-mail | index | archive | help
>Date: Thu, 27 Jan 2000 08:42:40 -0700
>From: Brett Glass <brett@lariat.org>

>>At any rate, I like logging on most of my deny rules.  You see all kinds of
>>neat stuff even on a home DSL connection.

[Public, this time -- dhw]  Confirmed.  Both at home and for my mother's
firewall.  Correlating the port scans is interesting in and of itself.
(We're both using Pac*Bell/PBI, but she's in a community about 30 miles
north of my place.)

>Good idea! So long as logging is rate-limited, this might be fun.

>Does one have to add anything to syslogd.conf to get the log messages from
>ipfw to appear in /var/log/messages?

I didn't.  (My firewall box has no keyboard or monitor attached
normally.)

But I also sent all syslogging for the firewall "over the wall" to an
internal box; were I slightly more paranoid, I'd try dealing with the
serial console stuff, but that hasn't appeared to be necessary just yet.

Cheers,
david
-- 
David Wolfskill		dhw@whistle.com		UNIX System Administrator
voice: (650) 577-7158	pager: (888) 347-0197	FAX: (650) 372-5915


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200001271651.IAA23459>