jimzah/freebsd-src
1
0
Fork 0
mirror of https://github.com/freebsd/freebsd-src.git synced 2024-12-04 03:49:02 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Allow overriding of net.inet.ip.fw.verbose_limit; if you want to make a

Browse Source 
rule that logs without a log limit, use "logamount 0" in addition to "log".
This commit is contained in:
Brian Feldman 2000-04-30 06:44:11 +00:00
parent 2ba118a15e
commit 0f95689794
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=59775
2 changed files with 15 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
sbin/ipfw/ipfw.8
View File

@ -422,13 +422,19 @@ If the kernel was compiled with the
.Dv IPFIREWALL_VERBOSE_LIMIT
option, then by default logging will cease after the number
of packets specified by the option are received for that
particular chain entry.
particular chain entry, and
.Em net.inet.ip.fw.verbose_limit
will be set to that number.
However, if
.Cm logamount Ar number
is used, that
.Ar number
will be the default logging limit rather than
.Dv IPFIREWALL_VERBOSE_LIMIT .
will be the logging limit rather than
.Em net.inet.ip.fw.verbose_limit ,
where the value
.Dq 0
removes the logging limit.
.Dv
Logging may then be re-enabled by clearing the logging counter
or the packet counter for that entry.
.Pp

10
sbin/ipfw/ipfw.c
View File

@ -1412,9 +1412,10 @@ add(ac,av)
if (!ac)
show_usage("``logamount'' requires argument");
rule.fw_logamount = atoi(*av);
if (rule.fw_logamount <= 0)
show_usage("``logamount'' argument must be greater "
"than 0");
if (rule.fw_logamount < 0)
show_usage("``logamount'' argument must be positive");
if (rule.fw_logamount == 0)
rule.fw_logamount = -1;
ac--; av++;
}
@ -1685,7 +1686,8 @@ badviacombo:
&rule.fw_logamount, &len, NULL, 0) == -1)
errx(1, "sysctlbyname(\"%s\")",
"net.inet.ip.fw.verbose_limit");
}
} else if (rule.fw_logamount == -1)
rule.fw_logamount = 0;
rule.fw_loghighest = rule.fw_logamount;
}
done: