Tim Wolfe wrote:

> Anyone know of a program/config for ipfwadm that will allow a sysadmin to
> watch where network users are going through a masquerading Linux firewall?

If the kernel was compiled with CONFIG_IP_FIREWALL_VERBOSE enabled,
you can use `ipfwadm ... -o' to log matching packets. E.g.

        ipfwadm -Fmi accept -P tcp -y -S 192.168.0.0/16 -o

will log outbound SYN-without-ACK packets.

-- 
Glynn Clements <[EMAIL PROTECTED]>
-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]

Reply via email to