Date: Mon, 25 Oct 2004 21:46:53 +0800 From: "Spades" <spades@galaxynet.org> To: "Sergey Zaharchenko" <doublef@tele-kom.ru> Cc: freebsd-questions@freebsd.org Subject: Re: ipfw flooding in /var/log/ipfw.log Message-ID: <064801c4ba99$169fcab0$0300a8c0@astral> References: <057501c4ba7d$d65a7fb0$0300a8c0@astral> <20041025133443.GA6371@shark.localdomain>
next in thread | previous in thread | raw e-mail | index | archive | help
error:
# ipfw add 900 allow log all from any to any setup
ipfw: unknown argument ``setup''
----- Original Message -----
From: "Sergey Zaharchenko" <doublef@tele-kom.ru>
To: "Spades" <spades@galaxynet.org>
Cc: <freebsd-questions@freebsd.org>
Sent: Monday, October 25, 2004 9:34 PM
Subject: Re: ipfw flooding in /var/log/ipfw.log
On Mon, Oct 25, 2004 at 06:31:49PM +0800,
Spades probably wrote:
>
> this is my ipfw.rule for now
> # ipfw add 900 allow log all from any to any
>
<snip>
>
> It will keep spitting this 2 lines as long i'm connected, how do i make
> it such as it will log only one instance?
>
You might want to change the rule to
# ipfw add 900 allow log all from any to any setup
^^^^^
which only logs the (attempts to) set up a connection (the initail SYN
packets). man ipfw has some interesting information on this.
HTH,
--
DoubleF
It is illegal to say "Oh, Boy" in Jonesboro, Georgia.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?064801c4ba99$169fcab0$0300a8c0>