[FUGSPBR] llog [logamount number]  	             If the kernel was compiled with IPFIREWALL_VERBOSE, then   when a  	             packet matches a rule with the log keyword a message will   be  	             logged to syslogd(8) with a LOG_SECURITY facility.  Note:   by  	             default, they are appended to the /var/log/security file   (see  	             syslog.conf(5)).  If the kernel was compiled with the  	             IPFIREWALL_VERBOSE_LIMIT option, then by default logging   will  	             cease after the number of packets specified by the option   are  	             received for that particular chain entry, and  	             net.inet.ip.fw.verbose_limit will be set to that number.    How-  	             ever, if logamount number is used, that number will be the   log-  	             ging limit rather than net.inet.ip.fw.verbose_limit, where   the  	             value ``0'' removes the logging limit.  Logging may then   be re-  	             enabled by clearing the logging counter or the packet   counter for  	             that entry.og do ipf
    Alvicler Magalhaes 
    calvin em dq.ufscar.br
       
    Ter Set 18 17:22:07 BRT 2001
    
    
  
oooopsss esqueci desta parte
man ipfw
(olhe em count )
olhe tambem este texto la no meio
.....
log [logamount number]
             If the kernel was compiled with IPFIREWALL_VERBOSE, then when a
             packet matches a rule with the log keyword a message will be
             logged to syslogd(8) with a LOG_SECURITY facility.  Note: by
             default, they are appended to the /var/log/security file (see
             syslog.conf(5)).  If the kernel was compiled with the
             IPFIREWALL_VERBOSE_LIMIT option, then by default logging will
             cease after the number of packets specified by the option are
             received for that particular chain entry, and
             net.inet.ip.fw.verbose_limit will be set to that number.  How-
             ever, if logamount number is used, that number will be the log-
             ging limit rather than net.inet.ip.fw.verbose_limit, where the
             value ``0'' removes the logging limit.  Logging may then be re-
             enabled by clearing the logging counter or the packet counter for
             that entry.......
[]s
calvin
"Alessandro O. Ungaro" wrote:
> Galera,
>
> como faco pro ipf fazer um log (por exemplo) de todas as tentativas de acesso pa porta bloqueada 21?
>
> ####
> block in quick on rl0 from any to any port = 21
> ####
>
> e onde esse log ficarah guardado?
>
> t+
>
> Alessandro
> ----
> Para sair da lista envie um e-mail para majordomo em fugspbr.org
> com as palavras "unsubscribe fugspbr" no corpo da mensagem.
--
Fifty flippant frogs
Walked by on flippered feet
And with their slime they made the time
Unnaturally fleet.
-------------- Próxima Parte ----------
Um anexo em HTML foi limpo...
URL: <http://www.fug.com.br/pipermail/freebsd/attachments/20010918/13e21d77/attachment.html>
    
    
Mais detalhes sobre a lista de discussão freebsd