Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 10 Jun 2001 12:54:46 -0400 (EDT)
From:      "Ian P. Thomas" <ipthomas_77@yahoo.com>
To:        todd@doonga.net (Todd Punderson)
Cc:        freebsd-questions@freebsd.org
Subject:   Re: firewall (ipfw) logging help
Message-ID:  <200106101654.MAA00401@scraemondaemon.my.domain>
In-Reply-To: <KJEPKOABHFNPCHDCFDKGAEPHCPAA.todd@doonga.net> from "Todd Punderson" at Jun 09, 2001 11:21:40 PM

next in thread | previous in thread | raw e-mail | index | archive | help
	If you know the IP address of the DNS your ISP is using or a range,
you could use this rule

$fwcmd add allow udp from your.ISP.DNS.here 53 to any in recv 

	Of course, if you are running your own DNS, you probably don't need
this.

Ian

In the last episode, Todd Punderson stated...
> 
> A quick dirty and sloppy way would be to make a rule for it and not put the
> log command on it. Make sure it would hit that rule before the deny that it
> is hitting now... :)
> Todd
> 
> 
> -----Original Message-----
> From: owner-freebsd-questions@FreeBSD.ORG
> [mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Otter
> Sent: Saturday, June 09, 2001 9:53 PM
> To: questions@FreeBSD.ORG
> Subject: firewall (ipfw) logging help
> 
> 
> I've recently changed a few things in the course of my source update
> today and decided to make my logs more vocal. Setting the
> firewall_quiet option in rc.conf to "NO" has made it so that every
> time there is an attempt on a port with nothing listening, it gets
> logged to /var/log/messages. How would one go about making exceptions
> to the log? I'm getting UDP hits from my one of my ISP's nameservers
> on port 53 (it's bind, but not running locally). Would this be done
> with an ipfw rule or setup somehow in hosts.allow? Or is this even
> possible? Also, can it be configured to be in its own log file (like
> syslog)? TIA.
> -Otter
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
> 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200106101654.MAA00401>