ipfw flooding in /var/log/ipfw.log

Sergey Zaharchenko doublef at tele-kom.ru
Mon Oct 25 06:35:50 PDT 2004


On Mon, Oct 25, 2004 at 06:31:49PM +0800,
 Spades probably wrote:
> 
> this is my ipfw.rule for now
> # ipfw add 900 allow log all from any to any
> 
<snip>
> 
> It will keep spitting this 2 lines as long i'm connected, how do i make
> it such as it will log only one instance?
> 

You might want to change the rule to

# ipfw add 900 allow log all from any to any setup
                                             ^^^^^
which only logs the (attempts to) set up a connection (the initail SYN
packets). man ipfw has some interesting information on this.

HTH,


-- 
DoubleF
It is illegal to say "Oh, Boy" in Jonesboro, Georgia.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20041025/c470e0ff/attachment.bin


More information about the freebsd-questions mailing list