> This would disable martian loggin, and I would like to retain the ability > of loggin martians, but I have this computer storming my network and > filling my logs. > I was able to track down the offending machine, so I would like to do > something like SILENT_DENY but for this narp packets while I continue > trying to find out the offending program.
I'm not sure if ipchains input rule gets the packets before the kernel flags it as a martian, but I think it does. If so, a simple ipchains -I input -j DROP <details> command will get rid of the log issues temporarily. Obviously, setup <details> to match the narp packets (ie source IP, protocol number, port number). Charles Steinkuehler http://lrp.steinkuehler.net http://c0wz.steinkuehler.net (lrp.c0wz.com mirror) _______________________________________________________________ Have big pipes? SourceForge.net is looking for download mirrors. We supply the hardware. You get the recognition. Email Us: [EMAIL PROTECTED] ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
