ipfw: 65534 deny

James Housley jim at Thehousleys.net
Tue Oct 19 04:33:55 PDT 2004


Spidey Knepscheld wrote:
> Hi Guys
>  
> When I restart my fw it takes between 1 to 10 min before restart it runs
> a list looking like this :
>  
> ipfw: 65534 deny TCP or UDP x.x.x.x port x.x.x.x port in via fxp1
>  
> where x.x.x.x is the ip's followed by a port nr.
>  
> I do understand that it needs to kill the connections but runnign for
> 10min is too long and if I could see the ip's I can try to find the
> problem parts of the network
> The run is to fast for me to see what ip's are running and I would like
> look at that list is it possible and if so how do I get it.
>  
>  
> Hope this makes sense
>  

I believe you are looking for /var/log/security

Jim

-- 
/"\   ASCII Ribbon Campaign  .
\ / - NO HTML/RTF in e-mail  .
  X  - NO Word docs in e-mail .
/ \ -----------------------------------------------------------------
jeh at FreeBSD.org      http://www.FreeBSD.org     The Power to Serve
jim at TheHousleys.Net  http://www.TheHousleys.net
---------------------------------------------------------------------
Documentation is alot like sex.  When it's good, it's very, very good.
And when it's bad, it's still better than nothing.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3228 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.freebsd.org/pipermail/freebsd-isp/attachments/20041019/331dba98/smime.bin


More information about the freebsd-isp mailing list