Date: Mon, 26 Jul 1999 13:16:57 -0500 (CDT) From: Joe Greco <jgreco@ns.sol.net> To: freebsd-hackers@freebsd.org Cc: freebsd-ipfw@freebsd.org Subject: securelevel and ipfw zero Message-ID: <199907261816.NAA05470@aurora.sol.net>
next in thread | raw e-mail | index | archive | help
Hello, So, I've a box that I have an ipfw ruleset on. The firewall should not be changeable during runtime, and the box runs at securelevel=3. In order to prevent DoS disk-fill attacks, I also have specified IPFW_VERBOSE_LIMIT. Now, the problem is, in securelevel 3, you cannot zero a rule's counter, so basically once you are up and running, you get to log IPFW_VERBOSE_LIMIT events and then you lose logging (ideally I'd zero nonzero rules once every N minutes). Comments? ... Joe ------------------------------------------------------------------------------- Joe Greco - Systems Administrator jgreco@ns.sol.net Solaria Public Access UNIX - Milwaukee, WI 414/342-4847 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ipfw" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199907261816.NAA05470>