Date: Fri, 22 Feb 2002 02:51:46 -0800 From: "Crist J. Clark" <cjc@FreeBSD.ORG> To: Joe & Fhe Barbish <barbish@a1poweruser.com> Cc: Simon J Mudd <sjmudd@pobox.com>, FBSDQ <questions@FreeBSD.ORG> Subject: Re: ipfw and getting the interface logged Message-ID: <20020222025145.L48401@blossom.cjclark.org> In-Reply-To: <LPBBIGIAAKKEOEJOLEGOCEFICIAA.barbish@a1poweruser.com>; from barbish@a1poweruser.com on Thu, Feb 21, 2002 at 12:30:22PM -0500 References: <Pine.LNX.4.44.0202211714050.30303-100000@phoenix.ea4els.ampr.org> <LPBBIGIAAKKEOEJOLEGOCEFICIAA.barbish@a1poweruser.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Feb 21, 2002 at 12:30:22PM -0500, Joe & Fhe Barbish wrote:
> This messages are being issued by the log_in_vain="YES"
> option in rc.conf. These are connection attempts by somebody
> who is trying to break into your system and got stopped before
> your IPFW firewall even knows about it.
That is not true. If something is logged by log_in_vain, it must have
passed ipfw(8). ipfw(8) comes first. log_in_vain is triggered when the
packets are being processed at the transport layer.
--
Crist J. Clark | cjclark@alum.mit.edu
| cjclark@jhu.edu
http://people.freebsd.org/~cjc/ | cjc@freebsd.org
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020222025145.L48401>