Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 22 Feb 2005 10:36:43 +0200
From:      Andriy Gapon <avg@icyb.net.ua>
To:        freebsd-security@freebsd.org
Subject:   periodic/security/550.ipfwlimit
Message-ID:  <421AEF1B.6000707@icyb.net.ua>

next in thread | raw e-mail | index | archive | help

550.ipfwlimit check in /etc/periodic/security takes into account only
global/default verbosity limit and does not account for a specific
logging limit set for a particular rule e.g.:

$ ipfw -a l | fgrep log
65000     *521*      41764 deny log logamount *1000* ip from any to any

$ sysctl -n net.inet.ip.fw.verbose_limit
*100*

>From security run output:

ipfw log limit reached:
65000     519      41672 deny log logamount 1000 ip from any to any


-- 
Andriy Gapon



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?421AEF1B.6000707>