[BSD] Tűzfal kérdés

[Carl von Clausewitz]

Meglett :-) köszi mindent :-)

2011/6/6 Erdei Zsolt <woodi at woodi.hu>

>
> well, van egy olyan sorod, hogy
> block in log <blablabla>
> vagy pass in log <blablabla>
>
> na, azt manipulald meg :)
>
>
> ---
> Erdei Zsolt
>
> woodi at woodi.hu
> http://www.woodi.hu
>
> On Mon, 6 Jun 2011 08:51:47 +0200, Carl von Clausewitz wrote:
>
>> Köszi :-), azonban van egy kérdésem, amire nem találtam a
>> választ. A szerverteremben lévő eszközök orrba-szájba
>> boradcastolnak - ezeknek a logolását hogy tudom leállítani, mert
>> hihetetlen mennyiség van a logban ebből:
>>
>> Jun  6 08:48:28 hostname ipmon[652]: 08:48:27.731423 re0 @0:20 b
>> 81.0.104.254,138 -> 81.0.104.255,138 PR udp len 20 211 IN broadcast
>> Jun  6 08:48:28 hostname ipmon[652]: 08:48:28.326052 re0 @0:19 b
>> 81.0.104.243,137 -> 81.0.104.255,137 PR udp len 20 78 IN broadcast
>> Jun  6 08:48:29 hostname ipmon[652]: 08:48:29.075878 re0 @0:19 b
>> 81.0.104.243,137 -> 81.0.104.255,137 PR udp len 20 78 IN broadcast
>> Jun  6 08:48:30 hostname ipmon[652]: 08:48:29.825885 re0 @0:19 b
>> 81.0.104.243,137 -> 81.0.104.255,137 PR udp len 20 78 IN broadcast
>> Jun  6 08:48:30 hostname ipmon[652]: 08:48:29.904208 re0 @0:19 b
>> 81.0.104.220,53611 -> 81.0.104.255,137 PR udp len 20 78 IN broadcast
>> Jun  6 08:48:30 hostname ipmon[652]: 08:48:29.904221 re0 @0:20 b
>> 81.0.104.238,138 -> 81.0.104.255,138 PR udp len 20 218 IN broadcast
>> Jun  6 08:48:31 hostname ipmon[652]: 08:48:30.738082 re0 @0:19 b
>> 81.0.104.220,59880 -> 81.0.104.255,137 PR udp len 20 78 IN broadcast
>> Jun  6 08:48:31 hostname ipmon[652]: 08:48:30.777296 2x re0 @0:19 b
>> 81.0.104.243,137 -> 81.0.104.255,137 PR udp len 20 78 IN broadcast
>> Jun  6 08:48:32 hostname ipmon[652]: 08:48:32.278066 re0 @0:19 b
>> 81.0.104.243,137 -> 81.0.104.255,137 PR udp len 20 78 IN broadcast
>> Jun  6 08:48:32 hostname ipmon[652]: 08:48:32.278079 re0 @0:20 b
>> 81.0.104.238,138 -> 81.0.104.255,138 PR udp len 20 218 IN broadcast
>> Jun  6 08:48:33 hostname ipmon[652]: 08:48:33.429175 re0 @0:19 b
>> 81.0.104.243,137 -> 81.0.104.255,137 PR udp len 20 78 IN broadcast
>> Jun  6 08:48:34 hostname ipmon[652]: 08:48:34.179215 re0 @0:19 b
>> 81.0.104.243,137 -> 81.0.104.255,137 PR udp len 20 78 IN broadcast
>> Jun  6 08:48:35 hostname ipmon[652]: 08:48:34.929193 re0 @0:19 b
>> 81.0.104.243,137 -> 81.0.104.255,137 PR udp len 20 78 IN broadcast
>> Jun  6 08:48:35 hostname ipmon[652]: 08:48:34.929360 re0 @0:20 b
>> 81.0.104.238,138 -> 81.0.104.255,138 PR udp len 20 218 IN broadcast
>> Jun  6 08:48:35 hostname ipmon[652]: 08:48:35.386764 re0 @0:20 b
>> 81.0.104.243,138 -> 81.0.104.255,138 PR udp len 20 239 IN broadcast
>> Jun  6 08:48:36 hostname ipmon[652]: 08:48:36.480853 re0 @0:19 b
>> 81.0.104.243,137 -> 81.0.104.255,137 PR udp len 20 78 IN broadcast
>> Jun  6 08:48:36 hostname ipmon[652]: 08:48:36.481280 re0 @0:20 b
>> 81.0.104.238,138 -> 81.0.104.255,138 PR udp len 20 218 IN broadcast
>> Jun  6 08:48:36 hostname ipmon[652]: 08:48:36.539561 re0 @0:20 b
>> 87.97.76.137,138 -> 87.97.76.255,138 PR udp len 20 229 IN broadcast
>> Jun  6 08:48:37 hostname ipmon[652]: 08:48:37.229883 re0 @0:19 b
>> 81.0.104.243,137 -> 81.0.104.255,137 PR udp len 20 78 IN broadcast
>> Jun  6 08:48:38 hostname ipmon[652]: 08:48:37.980172 re0 @0:19 b
>> 81.0.104.243,137 -> 81.0.104.255,137 PR udp len 20 78 IN broadcast
>> Jun  6 08:48:39 hostname ipmon[652]: 08:48:38.981518 re0 @0:20 b
>> 81.0.104.238,138 -> 81.0.104.255,138 PR udp len 20 218 IN broadcast
>> Jun  6 08:48:40 hostname ipmon[652]: 08:48:39.730702 2x re0 @0:19 b
>> 81.0.104.243,137 -> 81.0.104.255,137 PR udp len 20 78 IN broadcast
>> Jun  6 08:48:41 hostname ipmon[652]: 08:48:41.230029 re0 @0:19 b
>> 81.0.104.243,137 -> 81.0.104.255,137 PR udp len 20 78 IN broadcast
>> Jun  6 08:48:42 hostname ipmon[652]: 08:48:42.595540 re0 @0:19 b
>> 87.97.76.138,137 -> 87.97.76.255,137 PR udp len 20 78 IN broadcast
>> Jun  6 08:48:44 hostname ipmon[652]: 08:48:43.946507 re0 @0:26 b
>> 81.0.104.123,17500 -> 255.255.255.255,17500 PR udp len 20 146 IN
>> broadcast
>> Jun  6 08:48:44 hostname ipmon[652]: 08:48:43.947606 re0 @0:26 b
>> 81.0.104.123,17500 -> 81.0.104.255,17500 PR udp len 20 146 IN
>> broadcast
>> Jun  6 08:48:51 hostname ipmon[652]: 08:48:51.037714 re0 @0:26 b
>> 81.0.104.220,626 -> 224.0.0.1,626 PR udp len 20 67 IN low-ttl
>> multicast
>> Jun  6 08:48:55 hostname ipmon[652]: 08:48:55.089260 2x re0 @0:19 b
>> 81.0.104.25,137 -> 81.0.104.255,137 PR udp len 20 78 IN broadcast
>> Jun  6 08:48:56 hostname ipmon[652]: 08:48:56.588485 re0 @0:19 b
>> 81.0.104.25,137 -> 81.0.104.255,137 PR udp len 20 78 IN broadcast
>>
>> Köszönöm előre is...
>> Carl
>>
>>  2011/6/6 Berta Sándor
>>
>>  2011.06.06. 0:34 keltezéssel, Carl von Clausewitz írta:
>>>
>>>  Köszönöm az infókat, valójában lusta dög voltam
>>>> végignézni a tűzfalakat, és azt hittem, majd valaki szépen
>>>> bedob egy
>>>> mintakonfigot :-))) node sebaj, végignéztem, IPF lett belőle,
>>>> szépen megy is, csak loggol orrba-szájba, amit még
>>>> finomitani kell,
>>>>
>>>> A könyvnek meg nekiesek... Szép...
>>>>
>>>> üdv,
>>>> Carl
>>>>
>>>
>>> Alapból vannak minták!
>>> Nézd meg a /etc/rc.firewall -t.
>>> A 'man ipfw' is tele van mintákkal.
>>>
>>> üdv
>>> berta
>>>
>>> _______________________________________________
>>> BSD levlista
>>> BSD at hu.freebsd.org [1]
>>> https://lists.hu.freebsd.org/mailman/listinfo/bsd [2]
>>>
>>
>>
>>
>> Links:
>> ------
>> [1] mailto:BSD at hu.freebsd.org
>> [2] https://lists.hu.freebsd.org/mailman/listinfo/bsd
>> [3] mailto:berta at beco.hu
>>
>
> _______________________________________________
> BSD levlista
> BSD at hu.freebsd.org
> https://lists.hu.freebsd.org/mailman/listinfo/bsd
>
--------- következő rész ---------
Egy csatolt HTML állomány át lett konvertálva...
URL: <http://datacast.hu/pipermail/bsd/attachments/20110606/73591d13/attachment.html>