ipfw question ....

Mike Tancsa mike at sentex.net
Sat Aug 9 18:26:58 UTC 2014


On 8/9/2014 10:39 AM, William A. Mahaffey III wrote:
>>
>>
>> If net.inet.ip.fw.verbose is set to 1, packets will be logged to
>> syslogd(8) with a LOG_SECURITY facility up to a maximum of logamount
>> packets.  If no logamount is specified, the limit is taken from the
>> sysctl variable net.inet.ip.fw.verbose_limit.  In both cases, a value
>> of 0 means unlimited logging.
>>
>> Once the limit is reached, logging can be re-enabled by clearing the
>> logging counter or the packet counter for that entry, see the resetlog
>> command.
>>
>>     ---Mike
>>
>>
>
>
> port #, rather than just port # .... Is there a way to implement any of
> this ? Thanks & TIA ....


It there in the man pages of ipfw how to do it on a per rule basis. 
logamount can be set on a per rule basis.

	---Mike


-- 
-------------------
Mike Tancsa, tel +1 519 651 3400
Sentex Communications, mike at sentex.net
Providing Internet services since 1994 www.sentex.net
Cambridge, Ontario Canada   http://www.tancsa.com/


More information about the freebsd-questions mailing list