Date: Tue, 25 Feb 2003 14:08:27 -0800 From: "Crist J. Clark" <crist.clark@attbi.com> To: Paulo Roberto <nirv199@yahoo.com> Cc: freebsd-security@FreeBSD.ORG Subject: Re: log_in_vain Message-ID: <20030225220827.GA21469@blossom.cjclark.org> In-Reply-To: <20030225142757.75690.qmail@web14912.mail.yahoo.com> References: <20030225142757.75690.qmail@web14912.mail.yahoo.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Feb 25, 2003 at 06:27:57AM -0800, Paulo Roberto wrote:
> Hello,
>
> I have enabled net.inet.tcp.log_in_vain in sysctl but somehow it is not
> recognizing my proxy server, and preventing any connections to that
> port. It is strange because the firewall rules permit the connection,
> and just turning log_in_vain=0 it accepts the connections right away.
> Isn't this option to *only* log instead of denying an existing daemon
> listening on that port?
>
> > kernel: Connection attempt to TCP server:3128 from client:1167
All it does is log. It has no effect on the way a packet is
processed. The code is in src/sys/netinet/tcp_input.c.
--
Crist J. Clark | cjclark@alum.mit.edu
| cjclark@jhu.edu
http://people.freebsd.org/~cjc/ | cjc@freebsd.org
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030225220827.GA21469>