Re: [cobalt-users] [Qube2] ICMP IP Filtering

[Malcolm McLeary <mim@xxxxxxxxxx>]

Hi Mike,

On 3/5/00 8:58 AM, Mike Vanecek <nospam99@xxxxxxxxxxxx> wrote:

>:>This may be a useful read ...
>:>
>:>     Linux Firewalls 
>:>     by Robert L. Ziegler  
>:>
>:>     Paperback - 496 pages 1 edition (November 3, 1999) 
>:>     New Riders Publishing; ISBN: 0735709009
>:>
>Thanks, I will see if I can find it. Maybe it will give me some insight on
>how to get the Qube2 to keep a log of rejected requests. I could do it with
>an Ascend router and ZoneAlert firewall. Surely it is in there somewhere?

Actually the book focuses on ipchains and it does have a -l option to log 
packets which match the criteria.

Although the book uses ipchains semantics for all the examples the theory 
is "compatible" with ipfwadm (as used on the Qube2) ... Appendix B lists 
the worked example for ipfwadm.

Cheers,  Malcolm



. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

                       Information Alchemy Pty Ltd
                             ACN 089 239 305
                           Canberra, Australia

Malcolm McLeary                                  Mobile:   0412 636 086
Managing Director                                Email:  mim@xxxxxxxxxx

     This message was sent using Claris Emailer 2.0v3 for Macintosh.