Re: network security sysctl mib's

2003-12-03 Thread Melvyn Sopacua
On Tuesday 02 December 2003 18:29, fbsd_user wrote: > Thank you for responding with pointers to where I > can find some very limited documented info on the > MIB's I asked about. You're welcome. > The only conclusion one can draw from the test results is that > IPFILTER gets access to the packe

RE: network security sysctl mib's

2003-12-02 Thread fbsd_user
ollowing statements enable this function. # man tcp(4) and man udp(4) contain a little information on these MIBs net.inet.tcp.log_in_vain=1 net.inet.udp.log_in_vain=1 -Original Message- From: Melvyn Sopacua [mailto:[EMAIL PROTECTED] Sent: Monday, December 01, 2003 3:19 PM To: [EMAIL P

Re: network security sysctl mib's

2003-12-02 Thread Rob
Using apropos sysctl we get a list of several manpages, including blackhole(4), sysctl(3), sysctl(8) and sysctl.conf(5). These refer to several other sources, including ip(4), tcp(4), udp(4) and rc.conf(5) - they also mention , , , and if you want to study the variables first-hand. -

Re: network security sysctl mib's

2003-12-01 Thread Jez Hancock
On Mon, Dec 01, 2003 at 02:59:08PM -0500, fbsd_user wrote: > The sysctl.conf file contains MIB's to change the default setting of > internal options of the kernel at boot up time. > I have found these MIB's when I display all the sysctl's. > > These deal with how packets entering the FBSD system a

Re: network security sysctl mib's

2003-12-01 Thread Melvyn Sopacua
On Monday 01 December 2003 20:59, fbsd_user wrote: > net.inet.icmp.drop_redirect=1 > net.inet.icmp.log_redirect=0 icmp(4) > net.inet.ip.redirect=0 > > net.inet.ip.sourceroute=0 > net.inet.ip.accept_sourceroute=0 inet(4) > net.inet.icmp.bmcastecho=0 icmp(4) > net.inet.tcp.blackhole=2 > net.in