Date: Tue, 15 Jul 2003 10:15:16 -0700 From: Luigi Rizzo <rizzo@icir.org> To: Diego Linke - GAMK <linke@calnet.com.br> Cc: freebsd-ipfw@freebsd.org Subject: Re: I have four ideia for IPFW2 Message-ID: <20030715101516.A87982@xorpc.icir.org> In-Reply-To: <20030715120646.03f26167.linke@calnet.com.br>; from linke@calnet.com.br on Tue, Jul 15, 2003 at 12:06:46PM -0300 References: <3F132237.4010604@freebsdbrasil.com.br> <20030715004113.A99565@xorpc.icir.org> <20030715120646.03f26167.linke@calnet.com.br>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Jul 15, 2003 at 12:06:46PM -0300, Diego Linke - GAMK wrote:
> Hi,
>
> > There is already room in the O_LOG command header so we do not need
> > to modify ip_fw[2].h to add a field in the structure (helps with
> > binary compatibility). In fact, this would allow different levels of
> > verbosity in the logs.
>
> I am sorry Luigi, but i not understand!
>
> We have that to modify struct ipfw_insn_log, to pass one flag saying that one determined rule has log extended.
you can use spare fields in ipfw_insn o; for that
cheers
luigi
> We add an variable for indentify extended logs per rule. See:
>
> typedef struct _ipfw_insn_log {
> ipfw_insn o;
> u_int32_t max_log; /* how many do we log -- 0 = all */
> u_int32_t log_left; /* how many left to log */
> u_int32_t extended; /* Extended logs */
> } ipfw_insn_log;
>
> I do not understand how make this without modify ip_fw.h file.
>
> Do you have some idea ?
>
> Thanks
>
> --
> [ Diego Linke - GAMK ]
> System/Network/Security Administrator
> E-Mail/Site: gamk@gamk.com.br - http://www.gamk.com.br
> Public Key: http://www.gamk.com.br/gamk.asc
> Phone Number: (+5541) 9967-3464
>
> _______________________________________________
> freebsd-ipfw@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
> To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe@freebsd.org"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030715101516.A87982>