From owner-freebsd-ipfw Tue Jul 27 23:20:36 1999 Delivered-To: freebsd-ipfw@freebsd.org Received: from janus.syracuse.net (janus.syracuse.net [205.232.47.15]) by hub.freebsd.org (Postfix) with ESMTP id 395C815416; Tue, 27 Jul 1999 23:20:29 -0700 (PDT) (envelope-from green@FreeBSD.org) Received: from localhost (green@localhost) by janus.syracuse.net (8.9.2/8.8.7) with ESMTP id CAA71895; Wed, 28 Jul 1999 02:19:06 -0400 (EDT) X-Authentication-Warning: janus.syracuse.net: green owned process doing -bs Date: Wed, 28 Jul 1999 02:19:06 -0400 (EDT) From: "Brian F. Feldman" X-Sender: green@janus.syracuse.net To: Nate Williams Cc: Joe Greco , hackers@FreeBSD.org, freebsd-ipfw@FreeBSD.org Subject: Re: securelevel and ipfw zero In-Reply-To: <199907280449.WAA29417@mt.sri.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-ipfw@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Tue, 27 Jul 1999, Nate Williams wrote: > > If it will get ALL of you to give it a rest, how about: > > per-rule logging limits > > logging limit raising > > logging limit resetting > > Which would all NOT affect the statistics? > > We need more input from people who use the code, to make sure they don't > depend on the current 'features', or can live with changes to them. > > Implementing it is the easy part, making sure it's the right thing to do > is the hard part. Well, the easy part is done, except for raising limits. Look: ipfw: 1 Deny ICMP:8.0 127.0.0.1 127.0.0.1 out via lo0 ipfw: 1 Deny ICMP:8.0 127.0.0.1 127.0.0.1 out via lo0 ipfw: limit 2 reached on rule #1 ipfw: Entry 1 logging count reset. ipfw: 1 Deny ICMP:8.0 127.0.0.1 127.0.0.1 out via lo0 ipfw: 1 Deny ICMP:8.0 127.0.0.1 127.0.0.1 out via lo0 ipfw: limit 2 reached on rule #1 Nice? :) I think this feature should DEFINITELY go in. I'm going to clean it up some (ip_fw.c itself), and then make a set of diffs for this feature. > > > Nate > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-ipfw" in the body of the message > Brian Fundakowski Feldman _ __ ___ ____ ___ ___ ___ green@FreeBSD.org _ __ ___ | _ ) __| \ FreeBSD: The Power to Serve! _ __ | _ \._ \ |) | http://www.FreeBSD.org/ _ |___/___/___/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ipfw" in the body of the message