Re: Log spam: Limiting * response from 1 to 200 packets/sec

From: Gary Palmer <gpalmer_at_freebsd.org>
Date: Tue, 13 Dec 2016 16:15:25 +0000
On Tue, Dec 13, 2016 at 10:43:27AM -0500, Michael Butler wrote:
> On 12/13/16 10:29, Dimitry Andric wrote:
> 
> > Somebody is most likely port scanning your machines.  I see this all the
> > time on boxes connected to the internet.
> 
> As are mine. I wouldn't mind so much if the message contained sufficient 
> useful information that could be acted on, e.g. originating IP address 
> and, when appropriate, destination port.

sysctl net.inet.tcp.log_in_vain=1
sysctl net.inet.udp.log_in_vain=1

be prepared for a lot of logs if you are being port scanned

Regards,

Gary
Received on Tue Dec 13 2016 - 15:15:28 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:41:09 UTC