ipfw flooding in /var/log/ipfw.log

Spades spades at galaxynet.org
Mon Oct 25 06:46:54 PDT 2004


error:

# ipfw add 900 allow log all from any to any setup
ipfw: unknown argument ``setup''

----- Original Message ----- 
From: "Sergey Zaharchenko" <doublef at tele-kom.ru>
To: "Spades" <spades at galaxynet.org>
Cc: <freebsd-questions at freebsd.org>
Sent: Monday, October 25, 2004 9:34 PM
Subject: Re: ipfw flooding in /var/log/ipfw.log
On Mon, Oct 25, 2004 at 06:31:49PM +0800,
 Spades probably wrote:
> 
> this is my ipfw.rule for now
> # ipfw add 900 allow log all from any to any
> 
<snip>
> 
> It will keep spitting this 2 lines as long i'm connected, how do i make
> it such as it will log only one instance?
> 

You might want to change the rule to

# ipfw add 900 allow log all from any to any setup
                                             ^^^^^
which only logs the (attempts to) set up a connection (the initail SYN
packets). man ipfw has some interesting information on this.

HTH,


-- 
DoubleF
It is illegal to say "Oh, Boy" in Jonesboro, Georgia.




More information about the freebsd-questions mailing list