ipfw flooding in /var/log/ipfw.log

[Sergey Zaharchenko]

On Mon, Oct 25, 2004 at 09:46:53PM +0800,
 Spades probably wrote:
> error:
> 
> # ipfw add 900 allow log all from any to any setup
> ipfw: unknown argument ``setup''
> 

Sorry, `setup' only works with the TCP packets (I missed you used `all'
there). `ipfw add 900 allow log tcp from any to any setup' should work.
You can't use this with not-connection-oriented protocols, like UDP, and
you'll probably have to either add the additional 'allow log udp from
any to any' (which will nag you every time the machine does a DNS
lookup) or just not log the UDP packets.

-- 
DoubleF
Talkers are no good doers.
		-- William Shakespeare, "Henry VI"
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20041026/df98f5a6/attachment.bin