ipfw denial log - what's this mean?

Wojciech Puchar wojtek at wojtek.tensor.gdynia.pl
Thu Apr 10 19:10:04 UTC 2008


>
> ipfw denied packets:
> +++ /tmp/security.gnkQg5CA	Thu Apr 10 03:04:15 2008
> +00200        12         795 deny ip from any to 127.0.0.0/8
>
> What does this mean?  I understand that's the loopback interface, but I'm not 
> terribly knowledgeable on ipfw.  Is this some crack attempt, or normal 
> background noise?  I don't understand how lo0 would ever see any IP addresses 
> other than its own?!

while i don't use any of FreeBSD "security" scripts in cron, it probably 
jut copies non-zero count lines from ipfw show for rules marked with deny.



More information about the freebsd-questions mailing list