Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 27 Jul 2000 10:23:30 -0500
From:      Stephen Montgomery-Smith <stephen@math.missouri.edu>
To:        sheldonh@FreeBSD.org
Cc:        freebsd-bugs@FreeBSD.org
Subject:   Re: kern/20198: log setup of dynamic rules for ipfw
Message-ID:  <398053F2.DF9E3C5C@math.missouri.edu>
References:  <200007271132.EAA88124@freefall.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
sheldonh@FreeBSD.org wrote:
> 
> Synopsis: log setup of dynamic rules for ipfw
>
> Does ``logamount'' (see ipfw(8)) not suit your needs?
> 
> http://www.freebsd.org/cgi/query-pr.cgi?pr=20198

Certainly not.

Suppose I have a rule

add pass log logamount 10 from any to any 22 keep-state

So, there is a new connection
xxx:1056 -> yyy:22
Now there is a bunch of traffic between xxx:1056 and yyy:22 which gets
logged, which I don't care to log.  I only get the first 10 of these.

Later there is a new connection
zzz:4502 -> www:22
This I would like to log.  But because log amount is now filled
up, it doesn't get logged.

Maybe the counter is meant to be reset when a new dynamic rule
is created, but that doesn't seem to be the effect.


-- 
Stephen Montgomery-Smith
Department of Mathematics, University of Missouri, Columbia, MO 65211
Phone 573-882-4540, fax 573-882-1869
http://www.math.missouri.edu/~stephen  stephen@math.missouri.edu


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?398053F2.DF9E3C5C>