Subject: Re: OT: IPFilter rule
To: Sam Carleton <sam@linux-info.net>
From: Randy Beaudreault <maccult@pacbell.net>
List: netbsd-help
Date: 12/06/2002 15:55:38
>folks,
>
>Please forgive me, but I get tired of subscribing to mailing
>lists for one simply little question. I am hoping that some-
>one here is a ipfilter person...
>
>I am running my NetBSD firewall here at my house. I would like
>to setup a ipfilter rule to log all trafice going to port
>5190. (for those of you that don't know, that is the AIM
>default port) I am already blocking all the AIM servers that
>I know about, I simply want to log any and all of the servers
>I don't know about. I tried this, but it isn't working:
>
>log first out on iy0 from any to 192.168.0.5/32 port 5190
log first in on iy0 from any to 192.168.0.5/32 port 5190
>The catch is that I don't want to block or pass it at this
>point, simply log it.
>
>any thoughts?
>
>Sam
I'm assuming you only want to look at incoming traffic to port 5190.
For traffic coming out of your system use this as well:
log first in on <internal interface> from 192.168.0.5/32 to any port 5190
--
Randy
OS X - UNIX for the rest of us
NetBSD - Catch the Power!