Date: Mon, 25 Oct 2004 17:34:43 +0400 From: Sergey Zaharchenko <doublef@tele-kom.ru> To: Spades <spades@galaxynet.org> Cc: freebsd-questions@freebsd.org Subject: Re: ipfw flooding in /var/log/ipfw.log Message-ID: <20041025133443.GA6371@shark.localdomain> In-Reply-To: <057501c4ba7d$d65a7fb0$0300a8c0@astral> References: <057501c4ba7d$d65a7fb0$0300a8c0@astral>
next in thread | previous in thread | raw e-mail | index | archive | help
--SLDf9lqlvOQaIe6s
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Mon, Oct 25, 2004 at 06:31:49PM +0800,
Spades probably wrote:
>=20
> this is my ipfw.rule for now
> # ipfw add 900 allow log all from any to any
>=20
<snip>
>=20
> It will keep spitting this 2 lines as long i'm connected, how do i make
> it such as it will log only one instance?
>=20
You might want to change the rule to
# ipfw add 900 allow log all from any to any setup
^^^^^
which only logs the (attempts to) set up a connection (the initail SYN
packets). man ipfw has some interesting information on this.
HTH,
--=20
DoubleF
It is illegal to say "Oh, Boy" in Jonesboro, Georgia.
--SLDf9lqlvOQaIe6s
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (FreeBSD)
iD8DBQFBfQDxwo7hT/9lVdwRAkADAJ946N/rRZGialjLRxHfH+jCcEHwBgCggHTh
U7YARz+3yUwRQaJrW1LPT0o=
=p7zR
-----END PGP SIGNATURE-----
--SLDf9lqlvOQaIe6s--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20041025133443.GA6371>