Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 11 Jul 2006 18:46:31 +0900
From:      Tsurutani Naoki <turutani@scphys.kyoto-u.ac.jp>
To:        bug-followup@FreeBSD.org, matteo@FreeBSD.org, freebsd-bugs@FreeBSD.org
Subject:   Re: conf/96247: [patch] 550.ipfwlimit reports logs even if log size is not limited.
Message-ID:  <200607110946.AA00167@POLYMER5.scphys.kyoto-u.ac.jp>

next in thread | raw e-mail | index | archive | help
In either case of logamount is set to 0 or net.inet.ip.fw.verbose_limit is 0,
the limit of loging should be removed; 0 is not "0",
and "ipfw log limit" is not reached.

Here is a new patch:

--- etc/periodic/security/550.ipfwlimit.orig   Mon Apr 24 13:27:37 2006
+++ etc/periodic/security/550.ipfwlimit	Wed May 10 07:00:10 2006
@@ -51,10 +51,10 @@
 	grep '^[[:digit:]]\+[[:space:]]\+[[:digit:]]\+' | \
 	awk -v limit="$IPFW_LOG_LIMIT" \
 		'{if ($6 == "logamount") {
-			if ($2 > $7)
+			if ($7 != 0 && $2 > $7)
 				{print $0}
 		} else {
-			if ($2 > limit)
+			if (limit != 0 && $2 > limit)
 				{print $0}}
 		}' > ${TMP}




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200607110946.AA00167>