IPFW and syslog

Tiago N. Sampaio tiago at codigobinario.com.br
Sat May 6 13:47:04 UTC 2006


did you try add deny log ip from any to any?
ipfw add 65000 deny log ip from any to any

Hugs
Tiago N. Sampaio

Alexander wrote:
> So, I also try ipfw add 99 deny ip from any to any, but got the same
> trouble...
>
> Bjoern A. Zeeb wrote:
>   
>> On Sat, 6 May 2006, Alexander wrote:
>>
>>     
>>> Bjoern A. Zeeb wrote:
>>>       
>>>> On Sat, 6 May 2006, Alexander wrote:
>>>>
>>>>         
>>>>> Default rule is deny.
>>>>> Some packets is registered under default rule, but I can't find
>>>>> documentation - how log to syslog packets, that denied in default
>>>>> rules.
>>>>>           
>>>> Add the same rule with rule number - 1 and add log statement.
>>>>
>>>>         
>>> Gmmmm! I have added rule: ipfw add 1 deny ip from any to any
>>> And server dropped all packets...
>>>       
>> Well
>> "rule number" (for default rule) - 1 == 65535 - 1 == 65534
>>
>> I guess I should have added quotes or braces or the sample.
>>
>> Sorry for the trouble...
>>
>>     
>
> _______________________________________________
> freebsd-isp at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-isp
> To unsubscribe, send any mail to "freebsd-isp-unsubscribe at freebsd.org"
>   



More information about the freebsd-isp mailing list