diff options
author | Avery Pennarun <apenwarr@gmail.com> | 2012-01-02 18:19:08 -0500 |
---|---|---|
committer | Avery Pennarun <apenwarr@gmail.com> | 2012-01-02 18:19:19 -0500 |
commit | 2268e76771389ef5137a78340ea239e3885aad03 (patch) | |
tree | 7cd36b7772c16a130b5613ee8c78ef9c0c4ecf57 | |
parent | a8b71f6387bda654c68e0320d03a0e9bb96a47f7 (diff) |
ipfw: don't use 'log' parameter.
I guess we were causing the kernel to syslog on every single packet on
MacOS. Oops.
-rw-r--r-- | firewall.py | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/firewall.py b/firewall.py index 4fd8c79..1eda23d 100644 --- a/firewall.py +++ b/firewall.py @@ -243,11 +243,11 @@ def do_ipfw(port, dnsport, subnets): for swidth,sexclude,snet in sorted(subnets, reverse=True): if sexclude: ipfw('add', sport, 'skipto', xsport, - 'log', 'tcp', + 'tcp', 'from', 'any', 'to', '%s/%s' % (snet,swidth)) else: ipfw('add', sport, 'fwd', '127.0.0.1,%d' % port, - 'log', 'tcp', + 'tcp', 'from', 'any', 'to', '%s/%s' % (snet,swidth), 'not', 'ipttl', '42', 'keep-state', 'setup') @@ -289,12 +289,12 @@ def do_ipfw(port, dnsport, subnets): for ip in nslist: # relabel and then catch outgoing DNS requests ipfw('add', sport, 'divert', sport, - 'log', 'udp', + 'udp', 'from', 'any', 'to', '%s/32' % ip, '53', 'not', 'ipttl', '42') # relabel DNS responses ipfw('add', sport, 'divert', sport, - 'log', 'udp', + 'udp', 'from', 'any', str(dnsport), 'to', 'any', 'not', 'ipttl', '42') |