Date: Mon, 25 Oct 2004 17:34:43 +0400 From: Sergey Zaharchenko <doublef@tele-kom.ru> To: Spades <spades@galaxynet.org> Cc: freebsd-questions@freebsd.org Subject: Re: ipfw flooding in /var/log/ipfw.log Message-ID: <20041025133443.GA6371@shark.localdomain> In-Reply-To: <057501c4ba7d$d65a7fb0$0300a8c0@astral>
index | next in thread | previous in thread | raw e-mail
[-- Attachment #1 --]
On Mon, Oct 25, 2004 at 06:31:49PM +0800,
Spades probably wrote:
>
> this is my ipfw.rule for now
> # ipfw add 900 allow log all from any to any
>
<snip>
>
> It will keep spitting this 2 lines as long i'm connected, how do i make
> it such as it will log only one instance?
>
You might want to change the rule to
# ipfw add 900 allow log all from any to any setup
^^^^^
which only logs the (attempts to) set up a connection (the initail SYN
packets). man ipfw has some interesting information on this.
HTH,
--
DoubleF
It is illegal to say "Oh, Boy" in Jonesboro, Georgia.
[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (FreeBSD)
iD8DBQFBfQDxwo7hT/9lVdwRAkADAJ946N/rRZGialjLRxHfH+jCcEHwBgCggHTh
U7YARz+3yUwRQaJrW1LPT0o=
=p7zR
-----END PGP SIGNATURE-----
help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20041025133443.GA6371>