Re: A cool IPF firewall trick

2002-09-25 Thread Moti Levy

use swatch and direct it to beep on the events you want monitored .

- Original Message -
From: "Richard Tobin" <[EMAIL PROTECTED]>
To: "BSD Freak" <[EMAIL PROTECTED]>; "FreeBSD Questions"
<[EMAIL PROTECTED]>
Sent: Wednesday, September 25, 2002 8:15 PM
Subject: Re: A cool IPF firewall trick


> > I run several FreeBSD/IPF based firewalls. I would really like to get
> > some sort of basic visual representation as to what the firewall is
> > doing without actually logging in and tailing logs. My idea is to have
> > the HDD LED (red) light up when IPF blocks packets with an ipf block
> > rule and the power LED (green) light up when traffic is passed with an
> > ipf pass rule.
>
> You could have rules to send the packets to divert sockets (as is done
> for NAT), and write a program to respond to them.  See divert(4) and
> natd(8).
>
> It would be easier to use the keyboard leds (KDSETLED ioctl) than the
> disk and power leds, I think.
>
> -- Richard
>
>
> To Unsubscribe: send mail to [EMAIL PROTECTED]
> with "unsubscribe freebsd-questions" in the body of the message
>
>
>


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: A cool IPF firewall trick

2002-09-25 Thread Richard Tobin

> I run several FreeBSD/IPF based firewalls. I would really like to get
> some sort of basic visual representation as to what the firewall is
> doing without actually logging in and tailing logs. My idea is to have
> the HDD LED (red) light up when IPF blocks packets with an ipf block
> rule and the power LED (green) light up when traffic is passed with an
> ipf pass rule.

You could have rules to send the packets to divert sockets (as is done
for NAT), and write a program to respond to them.  See divert(4) and
natd(8).

It would be easier to use the keyboard leds (KDSETLED ioctl) than the
disk and power leds, I think.

-- Richard


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: A cool IPF firewall trick

2002-09-25 Thread Kliment Andreev

> rule and the power LED (green) light up when traffic is passed with an
> ipf pass rule.


It's easier to use CAPS/SCROLL leds...;)


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



A cool IPF firewall trick

2002-09-25 Thread BSD Freak

Hi all,

I run several FreeBSD/IPF based firewalls. I would really like to get
some sort of basic visual representation as to what the firewall is
doing without actually logging in and tailing logs. My idea is to have
the HDD LED (red) light up when IPF blocks packets with an ipf block
rule and the power LED (green) light up when traffic is passed with an
ipf pass rule.

Any one got any ideas where I would start to implement something this? 


Thanks in advance

-
Never lose a fax again, receive faxes to your personal email account!
Visit http://www.mbox.com.au/fax

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message