Andrey V. Elsukov wrote:

Arvinn wrote:

ipfw add pipe 5 log tcp from 200.0.0.0/7 to me dst-port 25 limit src-addr 2
ipfw add allow log tcp from any to me dst-port 25 limit src-addr 10

All I get in syslog is:
Sep 30 11:14:40 hostname drop session, too many entries


You can try this patch. ipfw will be logging a session drops like following:

Oct 4 14:15:44 hostname kernel: ipfw: drop session, too many entries (by rule 200)


Thank you very much. The patch worked like a charm. Is there any easy way to add src-ip/port and dst-ip/port too though?

Arvinn
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to