Charles, This would disable martian loggin, and I would like to retain the ability of loggin martians, but I have this computer storming my network and filling my logs. I was able to track down the offending machine, so I would like to do something like SILENT_DENY but for this narp packets while I continue trying to find out the offending program.
Thanks Any Thoughts?? > -----Mensaje original----- > De: Charles Steinkuehler [mailto:[EMAIL PROTECTED]] > Enviado el: Thursday, May 02, 2002 16:12 > Para: Sergio Morilla > CC: Leaf-user@lists. sourceforge. net (E-mail) > Asunto: Re: [leaf-user] Martians - Why??? narp??? Backdoor?? > > > > Thanks!!! > > I'll look into route.c to see why are they being generated!! > > Does anybody know how to discard them so the don't show in hte logs. > > <excerpt from /etc/network.conf> > > # Kernel logging of spoofed packets by default for interfaces - YES/NO > DEF_IP_KRNL_LOGMARTIANS=YES > > # Kernel logging of spoofed packets on this interface - YES/NO > eth0_IP_KRNL_LOGMARTIANS=YES > > </excerpt> > > Set the default and/or per-interface flags to "NO" to control martian > logging. > > Charles Steinkuehler > http://lrp.steinkuehler.net > http://c0wz.steinkuehler.net (lrp.c0wz.com mirror) > > _______________________________________________________________ Have big pipes? SourceForge.net is looking for download mirrors. We supply the hardware. You get the recognition. Email Us: [EMAIL PROTECTED] ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
