Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 10 Apr 2008 21:08:05 +0200 (CEST)
From:      Wojciech Puchar <wojtek@wojtek.tensor.gdynia.pl>
To:        Rob <bitabyss@gmail.com>
Cc:        FreeBSD Questions <freebsd-questions@freebsd.org>
Subject:   Re: ipfw denial log - what's this mean?
Message-ID:  <20080410210716.V8291@wojtek.tensor.gdynia.pl>
In-Reply-To: <47FE5EC1.7000809@gmail.com>
References:  <47FE5EC1.7000809@gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
>
> ipfw denied packets:
> +++ /tmp/security.gnkQg5CA	Thu Apr 10 03:04:15 2008
> +00200        12         795 deny ip from any to 127.0.0.0/8
>
> What does this mean?  I understand that's the loopback interface, but I'm not 
> terribly knowledgeable on ipfw.  Is this some crack attempt, or normal 
> background noise?  I don't understand how lo0 would ever see any IP addresses 
> other than its own?!

while i don't use any of FreeBSD "security" scripts in cron, it probably 
jut copies non-zero count lines from ipfw show for rules marked with deny.




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080410210716.V8291>