Re: securelevel and ipfw zero

[Matthew Dillon]

:Instead of zeroing it, how about raising the logging limit to (current +
:whatever the limit was)
:
: Brian Fundakowski Feldman      _ __ ___ ____  ___ ___ ___  
: [EMAIL PROTECTED]                   _ __ ___ | _ ) __|   \ 

    The way I see it either some piece of software is monitor the counters,
    in which case the sysad does not need to clear them and does not need to
    look at log messages, or the sysad is monitoring the stuff manually and
    using the log messages.  In the one case the counters don't need to be
    cleared (and, indeed, should not be), in the other case the sysad may 
    want to clear them due to the manual monitoring.

    What we are really discussing here is the use of ipfw's counters in an
    unsophisticated setup.  The sophisticated setup is already handled.

                                        -Matt
                                        Matthew Dillon 
                                        <[EMAIL PROTECTED]>



To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message