IPFW and syslog
Tiago N. Sampaio
tiago at codigobinario.com.br
Sat May 6 13:47:04 UTC 2006
did you try add deny log ip from any to any?
ipfw add 65000 deny log ip from any to any
Hugs
Tiago N. Sampaio
Alexander wrote:
> So, I also try ipfw add 99 deny ip from any to any, but got the same
> trouble...
>
> Bjoern A. Zeeb wrote:
>
>> On Sat, 6 May 2006, Alexander wrote:
>>
>>
>>> Bjoern A. Zeeb wrote:
>>>
>>>> On Sat, 6 May 2006, Alexander wrote:
>>>>
>>>>
>>>>> Default rule is deny.
>>>>> Some packets is registered under default rule, but I can't find
>>>>> documentation - how log to syslog packets, that denied in default
>>>>> rules.
>>>>>
>>>> Add the same rule with rule number - 1 and add log statement.
>>>>
>>>>
>>> Gmmmm! I have added rule: ipfw add 1 deny ip from any to any
>>> And server dropped all packets...
>>>
>> Well
>> "rule number" (for default rule) - 1 == 65535 - 1 == 65534
>>
>> I guess I should have added quotes or braces or the sample.
>>
>> Sorry for the trouble...
>>
>>
>
> _______________________________________________
> freebsd-isp at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-isp
> To unsubscribe, send any mail to "freebsd-isp-unsubscribe at freebsd.org"
>
More information about the freebsd-isp
mailing list