[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-users] RaQ2 ipfwadm question
- Subject: Re: [cobalt-users] RaQ2 ipfwadm question
- From: Gerald Waugh <gwaugh@xxxxxxxxxxxxxxxxxxxxxxx>
- Date: Thu May 1 09:32:01 2003
- List-id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
On Thu, 1 May 2003, Glenn Parsons wrote:
>
> My logcheck reports are not reporting port violations from my ipfwadm
> configuration:
>
> Apr 30 22:46:40 ns kernel: IP fw-in deny eth0 TCP 207.178.136.130:0
> 208.21.174.3:0 L=0 S=0x00 I=0 F=0x0000 T=0
>
> See how the incoming and received port is not reported? Is this normal? Is
> this a misconfiguration on my part? Is it ipfwadm or is it logcheck?
>
Is logcheck configured to parse the kernel log, /var/log/kernel?
Gerald
--
http://frontstreetnetworks.com | http://store.raqware.com
Front Street Networks LLC, 229 Front Street, Ste.#C
New Haven, CT 06513-3203 | phone: +1-203-785-0699