IPFW logging brokeness?

[Nickolay A. Kritsky]

Hello Avleen,

Saturday, May 31, 2003, 2:22:55 AM, you wrote:

AV> My rule:
AV> add 100 allow log tcp from any to <my IP> <ports> limit src-addr 2

AV> I want connecting parties to be able to form no more than 2 connection.
AV> This works perfectly, jsut as I'd expect it to.
AV> Except for 'log'.

AV> All I want is to have the first packet match of a connection match, like
AV> IPF's "log first" capability.

Try this:
90 pass tcp from any to any established
100 allow log tcp from any to <my IP> <ports> limit src-addr 2


;-------------------------------------------
; NKritsky
; mailto:nkritsky at internethelp.ru