Re: flood attacks

From: Denis P. Kravar (Denis_Kravar@agtu.secna.ru)
Date: 09/27/01 

Date: Thu, 27 Sep 2001 21:33:03 +0600
From: "Denis P. Kravar" <Denis_Kravar@agtu.secna.ru>
To: freebsd-security@FreeBSD.ORG

> Try sysctl -w net.inet.tcp.log_in_vain=1; sysctl -w net.inet.udp.log_in_vain=1
> It will provide you with logging attemted connections to your box.

It's only show trying connects on unlistened ports.
Your need sysctl -w net.inet.ip.fw.logging=1 or firewall_logging="YES" in rc.local
(or in rc.default) 

--
With best regards Denis Kravar.
E-mail: Denis_Kravar@agtu.secna.ru
ICQ: 15561179
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message