Listening outside ipfw / program interface to ipfw

John Pettitt jpp at cloudview.com
Thu Jan 13 12:02:58 PST 2005


Hi,
    Two quick questions that I can't seem to find answers for using google.

1) is is possible to listen outside an ipfw firewall - that is have 
ethereal record the packets before ipfw starts dropping them? If so how?

2) Is there an api to ipfw that will let me manipulate rules, query 
stats etc?  I need something faster than running the command line binary?

Thanks

John


More information about the freebsd-security mailing list