From nobody Mon Sep 22 01:08:41 2025 X-Original-To: freebsd-questions@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4cVQ3P5d3fz68J4H for ; Mon, 22 Sep 2025 01:08:33 +0000 (UTC) (envelope-from thronobulax@gmail.com) Received: from mail-io1-xd36.google.com (mail-io1-xd36.google.com [IPv6:2607:f8b0:4864:20::d36]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "WR4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4cVQ3P0qYYz43SW for ; Mon, 22 Sep 2025 01:08:33 +0000 (UTC) (envelope-from thronobulax@gmail.com) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20230601 header.b=GrZ1xx6v; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of thronobulax@gmail.com designates 2607:f8b0:4864:20::d36 as permitted sender) smtp.mailfrom=thronobulax@gmail.com Received: by mail-io1-xd36.google.com with SMTP id ca18e2360f4ac-88f1b8e448bso83883239f.2 for ; Sun, 21 Sep 2025 18:08:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1758503311; x=1759108111; darn=freebsd.org; h=content-transfer-encoding:subject:from:to:content-language :user-agent:mime-version:date:message-id:from:to:cc:subject:date :message-id:reply-to; bh=/1EwGHImtWi/Xct72Oo/zW7WtkLPH8vcKNrENGXwLZw=; b=GrZ1xx6v5a5QOo8I6CzM5p0TGBBjEhz88xTgVkXHIu6lHvvcRILVp4UiTu3j4Tx2uN 3eeMU/LfGFsvbRGAKKH/mK3ABYrxZvPAN28hUOJiu4UjR/9odsrDrwRGgnJgpfBTqSwk pavF8VyCiSPzreX7qZVe68acqxDAaT8q4o5SnLaGzhCVxP3LsqAz5u9pVtfkVBrb7uI7 hWmSFiQP9igS+3zPEOWJhD5fUHcnvd952pznTPNFhgIUzaEsEEGplZZla2uS1XlzPAB2 gIkbfKWZKRM34MrmR6lJghasHUin6tI1+LZ/16HhO313vsHLfL+TI+8z0M49nCBeE27q OJBA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1758503311; x=1759108111; h=content-transfer-encoding:subject:from:to:content-language :user-agent:mime-version:date:message-id:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=/1EwGHImtWi/Xct72Oo/zW7WtkLPH8vcKNrENGXwLZw=; b=swHog7k76szd5Os0LuE1T2UDx6YaeNkAxodMRDoJgEgiyY1BG7F6Xct2K0XThIMp65 zE7v+ojLc6ZieA5eaStfr5Qkuy1KngVnXBX1tjUoPr4OCWmDWPHzZGneTl3vcmlrqxFm wrP+Ua4iJdYKO02topMoQ9VvXQ2RhJUhtolHrUEkEooDdVlp7pPqnimk0RCfyu0cRwg1 3rIga7NZwR1bHeNRdb/VknXDgD/ngxXUQHF50I3qu53Po1ceokFO9cDgZRQopgiP9yIE Hm3b+UxX+REid8gKM9veTmhp0nJfqhiB+2foArTFj1UCVKcCa9Yf71++RkExzz6F9Ic5 nYPQ== X-Gm-Message-State: AOJu0YwV4Gr61klSXU55jxnCOJ4uk80lXhheTVsuU6iaffV00dgddSNk BmJFemFxPJ8RV2JyMKztNhEi/Ydncfnge2lkI4pHpWn5GYNg6hCW8HkdZrGvlw== X-Gm-Gg: ASbGncswz0Q8L0gdKaz/vka7ddrvNNs+5TgSSjym45Bh6m3lb1KkChua1y82PLUaJ1D 67bqNy+bzsXoWWyNhZhfUwdM4FSHzOcS7WiYvIz069eQ8PY6BiHhR4fJUxVEU+j45WShQiaZnSM ysVMA4UlD26+HSHfzC9wae82Mz9wtNlAQJ94ZAa1heADMjYewwsP/fGi0E49wBghmEpui5/Ni8x dLvhdOAuVy57xaK4RH0WRzGOnIw/8+xzPlu7fZldOZY5+J6r+oiWOWrkWwayeK4V/CwSzvt60pe vN1mMQj8rKhrc+PPQJelS8g9bbetRsuqKGQeuv8ZsgQOmC3Dt6D/MYsosCf2iEG5Hc6y9gYL4Sl rN9Vtq6MEimPq76P/8mrGCYYt07Qnx+fsuSbwzFgDeGx2 X-Google-Smtp-Source: AGHT+IGWg7+VoMxULYhcQQp2O6sYIDcaYOvn3y9kLhjWgcr95aG+nBP5V5gbI4u5xDFQe2yDnSreYA== X-Received: by 2002:a5d:8d18:0:b0:893:1c48:a26 with SMTP id ca18e2360f4ac-8ade4979277mr1545339239f.15.1758503310951; Sun, 21 Sep 2025 18:08:30 -0700 (PDT) Received: from [192.168.0.2] (ozzie.tundraware.com. [75.145.138.73]) by smtp.gmail.com with ESMTPSA id ca18e2360f4ac-8a480436dedsm402248639f.20.2025.09.21.18.08.29 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Sun, 21 Sep 2025 18:08:30 -0700 (PDT) Message-ID: Date: Sun, 21 Sep 2025 20:08:41 -0500 List-Id: User questions List-Archive: https://lists.freebsd.org/archives/freebsd-questions List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-questions@freebsd.org Sender: owner-freebsd-questions@FreeBSD.org MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Content-Language: en-US To: FreeBSD Mailing List From: Tim Daneliuk Subject: ipfw Logging Verbosity Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Spamd-Bar: --- X-Spamd-Result: default: False [-3.94 / 15.00]; NEURAL_HAM_LONG(-0.99)[-0.993]; NEURAL_HAM_SHORT(-0.98)[-0.979]; NEURAL_HAM_MEDIUM(-0.97)[-0.967]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20230601]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36]; MIME_GOOD(-0.10)[text/plain]; RCVD_VIA_SMTP_AUTH(0.00)[]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; MIME_TRACE(0.00)[0:+]; RCPT_COUNT_ONE(0.00)[1]; FREEMAIL_ENVFROM(0.00)[gmail.com]; FREEMAIL_FROM(0.00)[gmail.com]; ARC_NA(0.00)[]; MID_RHS_MATCH_FROM(0.00)[]; RCVD_TLS_LAST(0.00)[]; RCVD_COUNT_TWO(0.00)[2]; FROM_EQ_ENVFROM(0.00)[]; FROM_HAS_DN(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim]; TO_MATCH_ENVRCPT_ALL(0.00)[]; TO_DN_ALL(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; MLMMJ_DEST(0.00)[freebsd-questions@freebsd.org]; DKIM_TRACE(0.00)[gmail.com:+] X-Rspamd-Queue-Id: 4cVQ3P0qYYz43SW Is there some middle ground between ipfw 'log' options between silent and garden house. I have a rule that looks like this: deny ip from table(10) to any via ${INTERFACE} Table 10 is biiiig - lots and lots of entries in it. This results in nothing whatsoever being written to /var/log/security when a table entry is rejected. But, if I add the verb "log" to the above command, it writes a continuous stream of rejected connection attempts matching one of the table rules - presumably because these many entries are still trying (which I why I blacklisted them in the first place). Is there a way to get a more summarized view of the rejections so that the logging isn't so noisy, but still capture a sense of what is being stopped? TIA