From owner-freebsd-ipfw  Mon Jul 26 20:16:46 1999
Delivered-To: freebsd-ipfw@freebsd.org
Received: from apollo.backplane.com (apollo.backplane.com [209.157.86.2])
	by hub.freebsd.org (Postfix) with ESMTP
	id 0157115189; Mon, 26 Jul 1999 20:16:43 -0700 (PDT)
	(envelope-from dillon@apollo.backplane.com)
Received: (from dillon@localhost)
	by apollo.backplane.com (8.9.3/8.9.1) id UAA49808;
	Mon, 26 Jul 1999 20:16:39 -0700 (PDT)
	(envelope-from dillon)
Date: Mon, 26 Jul 1999 20:16:39 -0700 (PDT)
From: Matthew Dillon <dillon@apollo.backplane.com>
Message-Id: <199907270316.UAA49808@apollo.backplane.com>
To: "Brian F. Feldman" <green@FreeBSD.org>
Cc: Joe Greco <jgreco@ns.sol.net>, hackers@FreeBSD.org,
	freebsd-ipfw@FreeBSD.org
Subject: Re: securelevel and ipfw zero
References:  <Pine.BSF.4.10.9907262311020.35843-100000@janus.syracuse.net>
Sender: owner-freebsd-ipfw@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG


:That doesn't mean we shouldn't allow people to have an unsophisticated setup,
:just because a sophisticated one is available. It would be useful to have
:a per-firewall-rule counter, decrement it on each match if logging and
:set, and be able to reset to something higher.
:
: Brian Fundakowski Feldman      _ __ ___ ____  ___ ___ ___  

    There may be some confusion here.  I am advocating that we *allow* the
    zeroing of counters at secure level 3.

					-Matt
					Matthew Dillon 
					<dillon@backplane.com>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message