Date: Wed, 25 Sep 2002 20:24:33 -0400 From: "Moti Levy" <moti@flncs.com> To: "Richard Tobin" <richard@cogsci.ed.ac.uk>, "BSD Freak" <bsd-freak@mbox.com.au>, "FreeBSD Questions" <freebsd-questions@FreeBSD.ORG> Subject: Re: A cool IPF firewall trick Message-ID: <002801c264f3$1bfb9be0$f901a8c0@windows> References: <200209260015.BAA16096@sorley.cogsci.ed.ac.uk>
next in thread | previous in thread | raw e-mail | index | archive | help
use swatch and direct it to beep on the events you want monitored ..... ----- Original Message ----- From: "Richard Tobin" <richard@cogsci.ed.ac.uk> To: "BSD Freak" <bsd-freak@mbox.com.au>; "FreeBSD Questions" <freebsd-questions@FreeBSD.ORG> Sent: Wednesday, September 25, 2002 8:15 PM Subject: Re: A cool IPF firewall trick > > I run several FreeBSD/IPF based firewalls. I would really like to get > > some sort of basic visual representation as to what the firewall is > > doing without actually logging in and tailing logs. My idea is to have > > the HDD LED (red) light up when IPF blocks packets with an ipf block > > rule and the power LED (green) light up when traffic is passed with an > > ipf pass rule. > > You could have rules to send the packets to divert sockets (as is done > for NAT), and write a program to respond to them. See divert(4) and > natd(8). > > It would be easier to use the keyboard leds (KDSETLED ioctl) than the > disk and power leds, I think. > > -- Richard > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?002801c264f3$1bfb9be0$f901a8c0>