On 10/5/05, Alex de Kruijff <[EMAIL PROTECTED]> wrote: > On Thu, Sep 29, 2005 at 11:45:42AM -0400, Bob Johnson wrote: > > In FreeBSD 5.4R, I tried an IPFW configuration that includes something > > like this (plus a lot of other rules): > > > > check-state > > deny tcp from any to any established > > allow log tcp from any to ${my-ip} dst-port 22 setup limit src-addr 3 > > + other rules that use keep-state [...] > > Is there some way to get the first version to log only the initial > > packet while still retaining the dynamic limit src-addr rule? > > Yes you could use count instead of allow. > > check-state > count log tcp from any to ${my-ip} dst-port 22 limit src-addr 3 > allow tcp from any to ${my-ip} dst-port 22 setup limit src-addr 3 >
Thanks, I'll try that. I had overlooked the count option when I was reading the man pages. > > Howto's based on my ppersonal use, including information about > setting up a firewall and creating traffic graphs with MRTG > http://www.kruijff.org/alex/FreeBSD/ > And I will look over your tutorial as well. Thanks! - Bob _______________________________________________ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"