Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 26 Sep 2002 01:15:14 +0100 (BST)
From:      Richard Tobin <richard@cogsci.ed.ac.uk>
To:        BSD Freak <bsd-freak@mbox.com.au>, FreeBSD Questions <freebsd-questions@FreeBSD.ORG>
Subject:   Re: A cool IPF firewall trick
Message-ID:  <200209260015.BAA16096@sorley.cogsci.ed.ac.uk>
In-Reply-To: BSD Freak's message of Thu, 26 Sep 2002 09:56:26 %2B1000

next in thread | raw e-mail | index | archive | help
> I run several FreeBSD/IPF based firewalls. I would really like to get
> some sort of basic visual representation as to what the firewall is
> doing without actually logging in and tailing logs. My idea is to have
> the HDD LED (red) light up when IPF blocks packets with an ipf block
> rule and the power LED (green) light up when traffic is passed with an
> ipf pass rule.

You could have rules to send the packets to divert sockets (as is done
for NAT), and write a program to respond to them.  See divert(4) and
natd(8).

It would be easier to use the keyboard leds (KDSETLED ioctl) than the
disk and power leds, I think.

-- Richard


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200209260015.BAA16096>