RE: IPFIREWALL_VERBOSE_LIMIT ignored by recent kernel/world?

2004-07-04 Thread JJB
Sent: Sunday, July 04, 2004 12:37 AM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: IPFIREWALL_VERBOSE_LIMIT ignored by recent kernel/world? Hello, I have one PC with updated kernel/world from June 25th, and another from June 10th, all with sources for STABLE. Both PCs have a firewall. Neither

Re: IPFIREWALL_VERBOSE_LIMIT ignored by recent kernel/world?

2004-07-04 Thread Rob
Dan Pelleg wrote: I have a patch for that in kern/46080. Note I haven't tested it in a while http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/46080 So what I observed (security logfile get floaded with ipfw2 logs) is actually a kind of bug. If so, I'd rather wait till the fix makes it into the

RE: IPFIREWALL_VERBOSE_LIMIT ignored by recent kernel/world?

2004-07-04 Thread JJB
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: IPFIREWALL_VERBOSE_LIMIT ignored by recent kernel/world? Dan Pelleg wrote: I have a patch for that in kern/46080. Note I haven't tested it in a while http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/46080 So what I observed

Re: IPFIREWALL_VERBOSE_LIMIT ignored by recent kernel/world?

2004-07-04 Thread Rob
JJB wrote: Adding an logamount option to each logging rules would be to long way work around. Adding net.inet.ip.fw.verbose_limit=100 to /etc/sysctl.conf would be the short way. You're right with IPFW, but you missed Dan Pelleg's note that this seems not to work with IPFW2; for some reason IPFW2

IPFIREWALL_VERBOSE_LIMIT ignored by recent kernel/world?

2004-07-03 Thread Rob
Hello, I have one PC with updated kernel/world from June 25th, and another from June 10th, all with sources for STABLE. Both PCs have a firewall. Neither of the two seems to obey the verbose limit of 100, that I put in the kernel configuration file. In the past, /var/log/secure used to rotate once