Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 04 Sep 1997 11:27:33 -0500
From:      Prashant Dongre <pdongre@opentech.stpn.soft.net>
To:        ArkanoiD <ark@paranoid.convey.ru>
Cc:        firewalls@greatcircle.com, freebsd-security@FreeBSD.ORG, freebsd-hackers@FreeBSD.ORG
Subject:   Re: log connection attempts?
Message-ID:  <340EE174.C45D396F@opentech.stpn.soft.net>
References:  <203609030840.MAA14571@paranoid.convey.ru>

next in thread | previous in thread | raw e-mail | index | archive | help
ArkanoiD wrote:

> nuqneH,
>
> Did anyone try to patch the kernel to log connection attempts for ports
> (tcp and maybe udp) where no program accepts connection? (2.1.7)
>
> I _know_ i can do nearly the same with IP filtering/logging but i
> prefer another way..
>
> --
>                                        _     _  _  _  _      _  _
>    {::} {::} {::}  CU in Hell          _| o |_ | | _|| |   / _||_|   |_ |_ |_
>    (##) (##) (##)        /Arkan#iD    |_  o  _||_| _||_| /   _|  | o |_||_||_|
>
>    [||] [||] [||]            Do i believe in Bible? Hell,man,i've seen one!

  Have you configured kernel for IPFW (IP Firewall) ?.

IPFW does log connection attempts for the ports which are blocked for a network.

Messages get into /var/log/messages and also displayed on the console.

Prashant




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?340EE174.C45D396F>