On Fri, 2011-09-02 at 13:10 +0300, Liutauras Adomaitis wrote:

> I've been using it for a years, but only now I stepped on the strange problem:
> the rule is
> ACCEPT:info all fw tcp 22
> Primitive, however I get logs for each packet and expectation is that
> i get logs only for every incoming connection, syn packet.
> I've been using Mandriva and I guess distribution has made some rules,
> macros and this line was working as I expected, however now on Fedora
> 13 it just logs every packet.
> 
> Any ideas?

Did you inadvertently place the rule in the ESTABLISHED section of the
rules file rather than in the NEW section?

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: This is a digitally signed message part

------------------------------------------------------------------------------
Special Offer -- Download ArcSight Logger for FREE!
Finally, a world-class log management solution at an even better 
price-free! And you'll get a free "Love Thy Logs" t-shirt when you
download Logger. Secure your free ArcSight Logger TODAY!
http://p.sf.net/sfu/arcsisghtdev2dev
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to