os/doc
3
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Obtain yet another text from old security chapter (rev. 1.229)

Browse source 
to replace IPFIREWALL_VERBOSE_LIMIT description.

Improved by:	trhodes
This commit is contained in:
Denis Peplin 2005-02-25 09:07:37 +00:00
parent a4ef4737ba
commit 1a5ab23a37
Notes: svn2git 2020-12-08 03:00:23 +00:00 
svn path=/head/; revision=23892
1 changed files with 5 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
en_US.ISO8859-1/books/handbook/firewalls/chapter.sgml
View file

@ -2026,13 +2026,11 @@ net.inet.ip.fw.verbose_limit=5</programlisting>
<programlisting>options IPFIREWALL_VERBOSE_LIMIT=5</programlisting> <programlisting>options IPFIREWALL_VERBOSE_LIMIT=5</programlisting>
<para>This specifies the default number of packets from a <para>Limits the number of packets logged through
particular rule is to be logged. Without this option, each &man.syslogd.8; on a per entry basis. You may wish to use
repeated occurrences of the same packet will be logged, and this option in hostile environments which you want to log
eventually consuming all the free disk space resulting in firewall activity. This will close a possible denial of
services being denied do to lack of resources. The number <literal>5</literal> is the service attack via syslog flooding.</para>
number of consecutive times to log evidence of this unique
occurrence.</para>
<indexterm> <indexterm>
<primary>kernel options</primary> <primary>kernel options</primary>