From owner-freebsd-questions Thu Sep 26 0: 2:28 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 62AD437B401 for ; Thu, 26 Sep 2002 00:02:27 -0700 (PDT) Received: from srv.flncs.com (srv.flncs.com [12.27.148.74]) by mx1.FreeBSD.org (Postfix) with ESMTP id E39E343E3B for ; Thu, 26 Sep 2002 00:02:26 -0700 (PDT) (envelope-from moti@flncs.com) Received: from windows (cable [12.164.45.65]) by srv.flncs.com (Postfix) with ESMTP id 000B5106B8; Wed, 25 Sep 2002 20:24:48 -0400 (EDT) Message-ID: <002801c264f3$1bfb9be0$f901a8c0@windows> From: "Moti Levy" To: "Richard Tobin" , "BSD Freak" , "FreeBSD Questions" References: <200209260015.BAA16096@sorley.cogsci.ed.ac.uk> Subject: Re: A cool IPF firewall trick Date: Wed, 25 Sep 2002 20:24:33 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2919.6700 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6700 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG use swatch and direct it to beep on the events you want monitored ..... ----- Original Message ----- From: "Richard Tobin" To: "BSD Freak" ; "FreeBSD Questions" Sent: Wednesday, September 25, 2002 8:15 PM Subject: Re: A cool IPF firewall trick > > I run several FreeBSD/IPF based firewalls. I would really like to get > > some sort of basic visual representation as to what the firewall is > > doing without actually logging in and tailing logs. My idea is to have > > the HDD LED (red) light up when IPF blocks packets with an ipf block > > rule and the power LED (green) light up when traffic is passed with an > > ipf pass rule. > > You could have rules to send the packets to divert sockets (as is done > for NAT), and write a program to respond to them. See divert(4) and > natd(8). > > It would be easier to use the keyboard leds (KDSETLED ioctl) than the > disk and power leds, I think. > > -- Richard > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message