Re: IPFW logging brokeness?

From: Nickolay A. Kritsky (nkritsky_at_internethelp.ru)
Date: 06/01/03

  • Next message: Alwyn Goodloe: "Re: IP SEC filtering issue" 
    Date: Sun, 1 Jun 2003 13:59:08 +0400
To: Avleen Vig <lists-freebsd@silverwraith.com>

    Hello Avleen,

    Saturday, May 31, 2003, 2:22:55 AM, you wrote:

    AV> My rule:
    AV> add 100 allow log tcp from any to <my IP> <ports> limit src-addr 2

    AV> I want connecting parties to be able to form no more than 2 connection.
    AV> This works perfectly, jsut as I'd expect it to.
    AV> Except for 'log'.

    AV> All I want is to have the first packet match of a connection match, like
    AV> IPF's "log first" capability.

    Try this:
    90 pass tcp from any to any established
    100 allow log tcp from any to <my IP> <ports> limit src-addr 2

    ;-------------------------------------------
    ; NKritsky
    ; mailto:nkritsky@internethelp.ru

    _______________________________________________
    freebsd-security@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-security
    To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"

  • Next message: Alwyn Goodloe: "Re: IP SEC filtering issue"